---
id: "CVE-2026-125771"
page: "https://infrastack.ai/live/CVE-2026-125771"
kind: "vulnerability"
aliases: ["CVE-2026-125771"]
title: "AtlasAiDev MCP Server for WordPress: privilege escalation through incorrect privilege assignment"
severity: "high"
cvss: 7.2
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "ai-workflow-automation-ai-agent-hub", "fixed": [], "affected": "<= 2.0.3", "ecosystem": "wordpress"}]
ecosystems: []
tags: ["ai-agents", "ai-tooling", "mcp", "self-hosted", "wordpress"]
not_affected_if: []
published_at: "2026-11-15T15:16:46+00:00"
first_seen_at: "2026-11-15T15:36:07+00:00"
updated_at: "2026-11-15T15:38:20+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-125771", "first_seen_at": "2026-11-15T15:36:07+00:00"}, {"source": "analyst", "url": "https://wordpress.org/plugins/ai-workflow-automation-ai-agent-hub/", "first_seen_at": "2026-11-15T15:38:20+00:00", "cites": ["https://wordpress.org/plugins/ai-workflow-automation-ai-agent-hub/", "https://api.wordpress.org/plugins/info/1.0/ai-workflow-automation-ai-agent-hub.json"]}]
exploit_sources: []
---

# AtlasAiDev MCP Server for WordPress: privilege escalation through incorrect privilege assignment

Link for people: https://infrastack.ai/live/CVE-2026-125771 (this .md is for agents)

The AtlasAiDev MCP Server for WordPress assigns privileges incorrectly, letting a user gain rights beyond what they should have. Versions through 2.0.3 are affected according to the NVD entry.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- wordpress:ai-workflow-automation-ai-agent-hub affected <= 2.0.3 fixed no fixed version listed

## How to check

In wp-admin go to Plugins and find 'MCP Server for WordPress – AtlasMCP' (slug ai-workflow-automation-ai-agent-hub). Version 2.0.3 or earlier is in the affected range. From the shell, run: wp plugin get ai-workflow-automation-ai-agent-hub --field=version

## Fix

Update to the latest release from wordpress.org. The directory lists 2.0.4 (updated 2026-11-11), which is above the affected range (through 2.0.3). No vendor or maintainer page says 2.0.4 fixes this CVE, so the fixed version is unconfirmed.

## Timeline

- 2026-11-15T15:36:07+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-125771
- 2026-11-15T15:38:20+00:00 analyst https://wordpress.org/plugins/ai-workflow-automation-ai-agent-hub/ — NVD range through 2.0.3, CVSS 7.2 with PR:H per Patchstack. No Patchstack/Wordfence page found for this CVE yet. wordpress.org API shows current version 2.0.4, but no source ties it to this fix, so nothing is marked verified. Sibling CVE-2026-121576 (<=2.0.1, fixed in 2.0.2) is a separate record.

## Documents

- [describes] MCP Server for WordPress - AtlasMCP (wordpress.org) https://wordpress.org/plugins/ai-workflow-automation-ai-agent-hub/
- [fix] WordPress.org plugin API: MCP Server for WordPress (AtlasMCP), version 2.0.4 https://api.wordpress.org/plugins/info/1.0/ai-workflow-automation-ai-agent-hub.json

## From the sources

Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.This issue affects MCP Server for WordPress: from n/a through 2.0.3.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_