What happened
NVD published a medium-severity batch (2026-09-23) of broken-access-control/IDOR/SSRF issues across three AI-branded WordPress plugins: AI Engine unauthenticated IDOR (CVE-2026-93623, 5.3), WSP MCP AI Agents Connector contributor broken access control (CVE-2026-93529, 6.5), and six Directorist 'AI-Powered Business Directory' flaws covering IDOR listing deletion/favorites/orders, PII-exposing REST endpoint, and SSRF (CVE-2026-84098/84150/84026/84046/77766/84027, 4.3–6.5).
Why it matters
These are AI-connected WordPress surfaces (AI chat, MCP tool connectors for agents, AI directories) that sit adjacent to business data; broken access control and SSRF there let low-privilege or unauthenticated attackers read PII, manipulate listings/orders, and pivot the site server-side — but the blast radius is limited to sites running these niche plugins.
Attack vector
Various broken-access-control paths in AI-flavoured WordPress plugins: AI Engine has an unauthenticated IDOR; WSP MCP AI Agents Connector lets Contributor-level users reach restricted functionality; Directorist allows subscriber+ users to delete others' listings, read/alter other users' favorites, read registered-user PII via REST, and drive SSRF to internal addresses, plus unprivileged order/payment record creation.
Affected systems
AI Engine ≤ 3.7.8; WSP MCP – AI Agents Connector ≤ 2.7.0; Directorist < 8.9.5 (WordPress plugins)
Mitigation
Update plugins: AI Engine > 3.7.8, WSP MCP > 2.7.0 (per Patchstack), Directorist to 8.9.5 (per WPSCAN advisories). Review exposed REST endpoints and restrict to appropriate roles.