What the vulnerability does
01Description
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Privilege Escalation in version 3.4.9. This is due to missing WordPress capability enforcement in the MCP OAuth bearer-token authorization path, where any valid OAuth token causes MCP access to be granted without verifying administrator privileges. This makes it possible for authenticated (Subscriber+) attackers to invoke admin-level MCP tools and escalate privileges to Administrator.
Explanation of Vulnerability in Simple Terms
02Summary
The AI Engine plugin for WordPress contains a privilege management flaw that allows authenticated users with low-level permissions to gain unauthorized access to sensitive functionality. An attacker with a basic user account can read, modify, or delete data and potentially disrupt site operations. The vulnerability requires network access and an active user account but no additional user interaction.
What an attacker can do
03Attacker Capabilities
Read, modify, or delete sensitive data; disrupt site availability.
Potential impact on your site
04Site Impact
Unauthorized users can access admin functions, compromise data integrity, and cause service disruption without elevated privileges.
Conditions required to exploit
05Prerequisites
Valid WordPress user account with low-level permissions (e.g., subscriber or contributor role).
Key dates
06Disclosure timeline
May 17, 2026
CVE published
May 18, 2026
Record updated
