{"id":"CVE-2026-125771","kind":"vulnerability","aliases":["CVE-2026-125771"],"related":[],"title":"AtlasAiDev MCP Server for WordPress: privilege escalation through incorrect privilege assignment","description":"Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.This issue affects MCP Server for WordPress: from n/a through 2.0.3.","summary":"The AtlasAiDev MCP Server for WordPress assigns privileges incorrectly, letting a user gain rights beyond what they should have. Versions through 2.0.3 are affected according to the NVD entry.","severity":"high","cvss":7.2,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"ai-workflow-automation-ai-agent-hub","fixed":[],"affected":"<= 2.0.3","ecosystem":"wordpress"}],"ecosystems":[],"tags":["ai-agents","ai-tooling","mcp","self-hosted","wordpress"],"not_affected_if":[],"how_to_check":"In wp-admin go to Plugins and find 'MCP Server for WordPress – AtlasMCP' (slug ai-workflow-automation-ai-agent-hub). Version 2.0.3 or earlier is in the affected range. From the shell, run: wp plugin get ai-workflow-automation-ai-agent-hub --field=version","fix":"Update to the latest release from wordpress.org. The directory lists 2.0.4 (updated 2026-11-11), which is above the affected range (through 2.0.3). No vendor or maintainer page says 2.0.4 fixes this CVE, so the fixed version is unconfirmed.","status":"open","published_at":"2026-11-15T15:16:46+00:00","first_seen_at":"2026-11-15T15:36:07+00:00","triaged_at":"2026-11-15T15:37:09+00:00","updated_at":"2026-11-15T15:38:20+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-11-15T15:37:09Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"AtlasAiDev MCP Server for WordPress: privilege escalation through incorrect privilege assignment","impact":"high","summary":"The AtlasAiDev MCP Server for WordPress assigns privileges incorrectly, letting a user gain rights beyond what they should have. Versions through 2.0.3 are affected according to the NVD entry.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["wordpress","mcp","ai-agents"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker escalates privileges on the WordPress site","analyst_note":"Confirm the fixed version and required authentication from the WordPress plugin page or the vendor advisory; NVD text gives only the affected range.","how_to_check":"- Check the installed version of the plugin `ai-workflow-automation-ai-agent-hub` in the WordPress admin plugin list.\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Sites running the MCP Server for WordPress plugin (ai-workflow-automation-ai-agent-hub) at version 2.0.3 or earlier. The sources do not say which configurations or account roles are needed to exploit it.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000707,"input_tokens":4547,"output_tokens":505,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm the fixed version and required authentication from the WordPress plugin page or the vendor advisory; NVD text gives only the affected range.","search":"'-125771':14A,17A '-2026':13A,16A '2.0.3':57B,94C 'accord':60B 'affect':59B,86C 'agent':23A,27B,80C 'ai':19A,22A,26B,29B,76C,79C 'ai-ag':25B 'ai-tool':28B 'ai-workflow-automation-ai-agent-hub':18A,75C 'allow':82C 'assign':11A,42B,67C 'atlasaidev':1A,37B,70C 'autom':78C 'automation':21A 'beyond':50B 'cve':12A,15A 'entri':64B 'escal':7A 'escalation.this':84C 'gain':48B 'host':34B 'hub':24A,81C 'incorrect':9A,44B,65C 'issu':85C 'let':45B 'mcp':2A,31B,38B,71C,87C 'n/a':92C 'nvd':63B 'privileg':6A,10A,43B,66C,83C 'right':49B 'self':33B 'self-host':32B 'server':3A,39B,72C,88C 'tool':30B 'user':47B 'version':55B 'vulner':68C 'wordpress':5A,35B,41B,74C,90C 'workflow':20A,77C","nicknames":[],"mitigations":[],"who_affected":"Sites running the AtlasMCP / MCP Server for WordPress plugin (ai-workflow-automation-ai-agent-hub) at 2.0.3 or earlier. The CVSS vector from Patchstack requires high privileges (PR:H, an administrator-level account), so this is a privilege escalation by an already powerful user, not an anonymous attack. Sites that do not run the plugin can skip it. This is a different CVE from the earlier CVE-2026-121576 (a low-privilege user to admin, fixed in 2.0.2).","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["aiworkflowautomationaiagenthub"],"ptokens":["agent","ai","automation","hub","workflow"],"labels":["aiagents","aitooling","high","mcp","selfhosted","wordpress"],"campaign_type":null,"search_a":"'-125771':14A,17A '-2026':13A,16A 'agent':23A 'ai':19A,22A 'ai-workflow-automation-ai-agent-hub':18A 'assign':11A 'atlasaidev':1A 'automation':21A 'cve':12A,15A 'escal':7A 'hub':24A 'incorrect':9A 'mcp':2A 'privileg':6A,10A 'server':3A 'wordpress':5A 'workflow':20A","search_b":"'2.0.3':57B 'accord':60B 'affect':59B 'agent':27B 'ai':26B,29B 'ai-ag':25B 'ai-tool':28B 'assign':42B 'atlasaidev':37B 'beyond':50B 'entri':64B 'gain':48B 'host':34B 'incorrect':44B 'let':45B 'mcp':31B,38B 'nvd':63B 'privileg':43B 'right':49B 'self':33B 'self-host':32B 'server':39B 'tool':30B 'user':47B 'version':55B 'wordpress':35B,41B","search_c":"'2.0.3':94C 'affect':86C 'agent':80C 'ai':76C,79C 'ai-workflow-automation-ai-agent-hub':75C 'allow':82C 'assign':67C 'atlasaidev':70C 'autom':78C 'escalation.this':84C 'hub':81C 'incorrect':65C 'issu':85C 'mcp':71C,87C 'n/a':92C 'privileg':66C,83C 'server':72C,88C 'vulner':68C 'wordpress':74C,90C 'workflow':77C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-15T15:16:46+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-125771","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125771","severity":null,"published_at":"2026-11-15T15:16:46+00:00","modified_at":"2026-11-15T15:16:46+00:00","first_seen_at":"2026-11-15T15:36:07+00:00","fetched_at":"2026-11-15T15:36:07+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-125771:4049","url":"https://api.wordpress.org/plugins/info/1.0/ai-workflow-automation-ai-agent-hub.json","severity":null,"published_at":"2026-11-15T15:38:20+00:00","modified_at":"2026-11-15T15:38:20+00:00","first_seen_at":"2026-11-15T15:38:20+00:00","fetched_at":"2026-11-15T15:38:20+00:00","note":"NVD range through 2.0.3, CVSS 7.2 with PR:H per Patchstack. No Patchstack/Wordfence page found for this CVE yet. wordpress.org API shows current version 2.0.4, but no source ties it to this fix, so nothing is marked verified. Sibling CVE-2026-121576 (<=2.0.1, fixed in 2.0.2) is a separate record.","cites":["https://api.wordpress.org/plugins/info/1.0/ai-workflow-automation-ai-agent-hub.json","https://wordpress.org/plugins/ai-workflow-automation-ai-agent-hub/"]}],"documents":[{"id":164110,"url":"https://api.wordpress.org/plugins/info/1.0/ai-workflow-automation-ai-agent-hub.json","title":"WordPress.org plugin API: MCP Server for WordPress (AtlasMCP), version 2.0.4","kind":"release","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":164111,"url":"https://wordpress.org/plugins/ai-workflow-automation-ai-agent-hub/","title":"MCP Server for WordPress - AtlasMCP (wordpress.org)","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}