{"id":"CVE-2026-121576","published":"2026-11-09T17:17:14.493","lastModified":"2026-11-09T18:17:22.480","description":"Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.This issue affects MCP Server for WordPress: from n/a through 2.0.1.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-266"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/ai-workflow-automation-ai-agent-hub/vulnerability/wordpress-mcp-server-for-wordpress-plugin-2-0-1-privilege-escalation-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The AtlasAiDev MCP Server for WordPress plugin contains an incorrect privilege assignment flaw (CWE-266), allowing authenticated low-privilege users to escalate their privileges to administrative levels. This occurs in versions up to and including 2.0.1, enabling full compromise of confidentiality, integrity, and availability.","exploitability":"Exploitation requires valid low-privilege credentials (PR:L) and no user interaction (UI:N), making it moderately easy for an attacker with a compromised or weakly secured account to escalate privileges.","blast_radius":"Successful exploitation grants full administrative control over the WordPress site, enabling data exfiltration, malware deployment, or complete site takeover.","remediation":"Upgrade to version 2.0.2 or later, as this is the first fixed release addressing the privilege escalation vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","wordpress","mcp-server","cwe-266"],"model":"garnet-coder","analyzedAt":"2026-11-10T09:47:56.889Z"}}