The AI Puffer – AI Chatbot, AI Writer & Automation WordPress plugin is vulnerable to an authorization bypass that allows any authenticated user of subscriber level or higher to modify global plugin settings through the ajax_save_cpt_indexing_options endpoint. The plugin does not verify that the caller has the necessary permissions before applying changes to key configuration options such as aipkit_training_general_settings and aipkit_indexing_field_settings. This deficiency can lead to unintended alteration of indexing behavior, chunking parameters, file visibility, and per-CPT field indexing, effectively changing how the plugin processes content for all users on the site.

The issue affects the senols AI Puffer plugin on all WordPress sites that are running version 2.4.89 or earlier and have granted the 'sources' module access to a role lower than administrator via the plugin's Role Manager. Any site configured in this way, with an authenticated subscriber or higher privileged role, is vulnerable.

The CVSS score of 3.1 indicates low severity, yet the exploit is straightforward for any authenticated user who has been given the appropriate role. The EPSS score is not available, so the likelihood of exploitation cannot be quantified, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is most likely the publicly accessible AJAX endpoint, which authenticated users can reach. While the impact is primarily configuration change, it could be leveraged as a foothold for further activity if other weaknesses exist.