CVE-2026-32560

Received Received - Intake

Subscriber Local File Inclusion in MagicAI for WordPress

Publication date: 2026-08-24

Last updated on: 2026-08-24

Assigner: Patchstack

Description

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-24

Last Modified

2026-08-24

Generated

2026-08-25

AI Q&A

2026-08-25

EPSS Evaluated

N/A

NVD

CVE-2026-32560

Affected Vendors & Products

Vendor	Product	Version / Range
magicai	magicai	to 1.4 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-98	The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.

Attack-Flow Graph

Executive Summary

This vulnerability is a Subscriber Local File Inclusion in the MagicAI WordPress plugin versions 1.4 or lower. It allows authenticated users to include local files on the server through improper file inclusion mechanisms, potentially leading to unauthorized access or data leakage.

Impact Analysis

An attacker with subscriber-level access could exploit this to read sensitive files on the server, including configuration files, credentials, or other confidential data. This could lead to further attacks like privilege escalation or data theft.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Update MagicAI for WordPress to the latest version, as the vulnerability affects versions <= 1.4. If an update is not available, consider disabling the plugin temporarily until a patch is released.

Hi! I’m here to help you understand CVE-2026-32560. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70