AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via AJAX Actions 'removeGroup' and 'clear'

/* classes/controller.php:108 */
	public function getPermissions() {
		return array();
	}
	/**
	 * Methods that require nonce to be generated
	 * If need - should be redefined in each controller where it required.
	 *
	 * @return array
	 */
	public function getNotNoncedMethods() {
		return array();
	}
	/**
	 * Methods that do not require user rights control
	 */
	public function getFrontMethods() {
		return array();
	}

--- /home/deploy/wp-safety.org/data/plugin-versions/ai-copilot-content-generator/1.4.21/classes/controller.php	2026-05-25 14:27:02.000000000 +0000
+++ /home/deploy/wp-safety.org/data/plugin-versions/ai-copilot-content-generator/1.5.4/classes/controller.php	2026-06-22 20:55:48.000000000 +0000
@@ -110,25 +118,73 @@
 	 *
 	 * @return array
 	 */
-	public function getNotNoncedMethods() {
-		return array();
-	}
-	/**
-	 * Methods that do not require user rights control
-	 */
-	public function getFrontMethods() {
-		return array();
-	}
-	public function getModule() {
-		return WaicFrame::_()->getModule( $this->getCode() );
-	}
+	public function getNoncedMethods() {
+		return array();
+	}
+	public function allowNoprivAjax( $action ) {
+		return false;
+	}
+	protected function _getAdminAjaxCap() {
+		$cap = 'manage_options';
+		$adminMenu = WaicFrame::_()->getModule('adminmenu');
+		if ($adminMenu && method_exists($adminMenu, 'getMainCap')) {
+			$mainCap = $adminMenu->getMainCap();
+			if (!empty($mainCap)) {
+				$cap = $mainCap;
+			}
+		}
+		return $cap;
+	}
+	protected function _ajaxSecurityError( $message ) {
+		if (function_exists('status_header')) {
+			status_header(403);
+		}
+		$res = new WaicResponse();
+		$res->pushError($message);
+		return $res->ajaxExec(true);
+	}
+	protected function _checkAdminAjaxSecurity() {
+		if (false === check_ajax_referer('waic-nonce', 'waicNonce', false)) {
+			return $this->_ajaxSecurityError(esc_html__('Security check failed', 'ai-copilot-content-generator'));
+		}
+		if (!current_user_can($this->_getAdminAjaxCap())) {
+			return $this->_ajaxSecurityError(esc_html__('You have no permissions to view this page', 'ai-copilot-content-generator'));
+		}
+		return true;
+	}
+	public function getModule() {
+		return WaicFrame::_()->getModule( $this->getCode() );
+	}
 	protected function _prepareTextLikeSearch( $val ) {
 		return ''; // Should be re-defined for each type
 	}
 	protected function _prepareModelBeforeListSelect( $model ) {
 		return $model->setSelectFields('*');
 	}
-
+	public function removeGroup() {
+		if (true !== $this->_checkAdminAjaxSecurity()) {
+			return;
+		}
+		$res = new WaicResponse();
+		if ($this->getModel()->removeGroup(WaicReq::getVar('ids', 'post'))) {
+			$res->addMessage(esc_html__('Done', 'ai-copilot-content-generator'));
+		} else {
+			$res->pushError($this->getModel()->getErrors());
+		}
+		$res->ajaxExec();
+	}
+	public function clear() {
+		if (true !== $this->_checkAdminAjaxSecurity()) {
+			return;
+		}
+		$res = new WaicResponse();
+		if ($this->getModel()->clear()) {
+			$res->addMessage(esc_html__('Done', 'ai-copilot-content-generator'));
+		} else {
+			$res->pushError($this->getModel()->getErrors());
+		}
+		$res->ajaxExec();
+	}