{"id":"CVE-2026-121576","kind":"vulnerability","aliases":["CVE-2026-121576"],"related":[],"title":"MCP Server for WordPress: incorrect privilege assignment allows privilege escalation","description":"Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.This issue affects MCP Server for WordPress: from n/a through 2.0.1.","summary":"The MCP Server for WordPress plugin, published by AtlasAiDev as ai-workflow-automation-ai-agent-hub, assigns privileges incorrectly. A user with limited access can escalate their privileges on the WordPress site.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"ai-workflow-automation-ai-agent-hub","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["ai-agent","ai-tooling","mcp","wordpress"],"not_affected_if":["plugin-not-installed"],"how_to_check":"- Check whether the `MCP Server for WordPress` plugin (slug ai-workflow-automation-ai-agent-hub) is installed and its version, in the WordPress admin under Plugins.\n- Compare the installed version with the range in the sources: affected through `2.0.1`.","fix":"- MCP Server for WordPress: unknown; the sources give no fixed version beyond the affected range ending at `2.0.1`.","status":"open","published_at":"2026-11-09T17:17:14+00:00","first_seen_at":"2026-11-09T17:27:38+00:00","triaged_at":"2026-11-09T17:28:44+00:00","updated_at":"2026-11-09T17:28:44+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-11-09T17:28:44Z","model":"claude-haiku-5-5","output":{"fix":"- MCP Server for WordPress: unknown; the sources give no fixed version beyond the affected range ending at `2.0.1`.","reach":"unknown","title":"MCP Server for WordPress: incorrect privilege assignment allows privilege escalation","impact":"high","summary":"The MCP Server for WordPress plugin, published by AtlasAiDev as ai-workflow-automation-ai-agent-hub, assigns privileges incorrectly. A user with limited access can escalate their privileges on the WordPress site.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["wordpress","mcp","ai-agent"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Low-privileged user gains higher WordPress privileges, possibly administrator.","analyst_note":"Find the vendor advisory or the NVD/WPScan entry for CVE-2026-121576 to confirm the fixed version, required privilege, and whether the flaw is reachable without authentication.","how_to_check":"- Check whether the `MCP Server for WordPress` plugin (slug ai-workflow-automation-ai-agent-hub) is installed and its version, in the WordPress admin under Plugins.\n- Compare the installed version with the range in the sources: affected through `2.0.1`.","plain_action":"","product_name":"ai-workflow-automation-ai-agent-hub","needs_analyst":true,"not_affected_if":["plugin-not-installed"],"who_is_affected":"Sites running the MCP Server for WordPress plugin up to and including version 2.0.1 are affected. The sources do not say which configurations or roles are needed to reach the flaw, so unknown whether sites without MCP features enabled are exposed.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000788,"input_tokens":4547,"output_tokens":666,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-121576':13A,16A '-2026':12A,15A '2.0.1':94C 'access':56B 'affect':86C 'agent':22A,26B,47B,80C 'ai':18A,21A,25B,28B,43B,46B,76C,79C 'ai-ag':24B 'ai-tool':27B 'ai-workflow-automation-ai-agent-hub':17A,42B,75C 'allow':8A,82C 'assign':7A,49B,67C 'atlasaidev':40B,70C 'autom':45B,78C 'automation':20A 'cve':11A,14A 'escal':10A,58B 'escalation.this':84C 'hub':23A,48B,81C 'incorrect':5A,51B,65C 'issu':85C 'limit':55B 'mcp':1A,30B,33B,71C,87C 'n/a':92C 'plugin':37B 'privileg':6A,9A,50B,60B,66C,83C 'publish':38B 'server':2A,34B,72C,88C 'site':64B 'tool':29B 'user':53B 'vulner':68C 'wordpress':4A,31B,36B,63B,74C,90C 'workflow':19A,44B,77C","nicknames":[],"mitigations":[],"who_affected":"Sites running the MCP Server for WordPress plugin up to and including version 2.0.1 are affected. The sources do not say which configurations or roles are needed to reach the flaw, so unknown whether sites without MCP features enabled are exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["aiworkflowautomationaiagenthub"],"ptokens":["agent","ai","automation","hub","workflow"],"labels":["aiagent","aitooling","high","mcp","vendor","wordpress"],"campaign_type":null,"search_a":"'-121576':13A,16A '-2026':12A,15A 'agent':22A 'ai':18A,21A 'ai-workflow-automation-ai-agent-hub':17A 'allow':8A 'assign':7A 'automation':20A 'cve':11A,14A 'escal':10A 'hub':23A 'incorrect':5A 'mcp':1A 'privileg':6A,9A 'server':2A 'wordpress':4A 'workflow':19A","search_b":"'access':56B 'agent':26B,47B 'ai':25B,28B,43B,46B 'ai-ag':24B 'ai-tool':27B 'ai-workflow-automation-ai-agent-hub':42B 'assign':49B 'atlasaidev':40B 'autom':45B 'escal':58B 'hub':48B 'incorrect':51B 'limit':55B 'mcp':30B,33B 'plugin':37B 'privileg':50B,60B 'publish':38B 'server':34B 'site':64B 'tool':29B 'user':53B 'wordpress':31B,36B,63B 'workflow':44B","search_c":"'2.0.1':94C 'affect':86C 'agent':80C 'ai':76C,79C 'ai-workflow-automation-ai-agent-hub':75C 'allow':82C 'assign':67C 'atlasaidev':70C 'autom':78C 'escalation.this':84C 'hub':81C 'incorrect':65C 'issu':85C 'mcp':71C,87C 'n/a':92C 'privileg':66C,83C 'server':72C,88C 'vulner':68C 'wordpress':74C,90C 'workflow':77C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-09T17:17:14+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121576","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121576","severity":null,"published_at":"2026-11-09T17:17:14+00:00","modified_at":"2026-11-09T17:17:14+00:00","first_seen_at":"2026-11-09T17:27:38+00:00","fetched_at":"2026-11-09T17:27:38+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}