Skip to content

A Subscriber can create a comment that appears to be an authoritative "WordPress AI" review note

Moderate
jeffpaul published GHSA-j7hg-vqpw-f98f Aug 31, 2026

Package

composer wordpress/ai (Composer)

Affected versions

<= 1.0.1

Patched versions

1.0.2

Description

The Review Notes experiment will create Notes (which are stored as WordPress comments) that provide actionable feedback. These Notes are associated with a generic WordPress AI author by hooking into rest_pre_insert_comment and looking for the ai_note meta.

If someone creates a comment and sends that meta themselves, that comment will end up getting the WordPress AI author attached to it even if it wasn't a comment that was created by the Review Notes experiment.

AI version 1.0.2 has been released which fixed the problem by adding additional user permission checks and ensuring we only run this check on Notes, no other comment types.

Severity

Moderate

CVE ID

No known CVE

Weaknesses

No CWEs

Credits