What the vulnerability does
01Description
The AIKTP plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization checks on the /aiktp/getToken REST API endpoint in all versions up to, and including, 5.0.04. The endpoint uses the 'verify_user_logged_in' as a permission callback, which only checks if a user is logged in, but fails to verify if the user has administrative capabilities. This makes it possible for authenticated attackers with Subscriber-level access and above to retrieve the administrator's 'aiktpz_token' access token, which can then be used to create posts, upload media library files, and access private content as the administrator.
Explanation of Vulnerability in Simple Terms
02Summary
AIKTP versions 5.0.04 and earlier lack proper authorization checks, allowing authenticated users to read and modify data they should not have access to. An attacker with a low-privilege account can view or alter sensitive information without additional interaction. The vulnerability affects confidentiality and integrity but not availability. Update to version 5.0.7 or later to remediate.
What an attacker can do
03Attacker Capabilities
Read and modify data belonging to other users or restricted areas of the application.
Potential impact on your site
04Site Impact
Unauthorized data access and modification by authenticated users; potential exposure of sensitive information.
Conditions required to exploit
05Prerequisites
Attacker must have a valid low-privilege user account on the AIKTP system.
Key dates
06Disclosure timeline
January 24, 2026
CVE published
April 8, 2026
Record updated
