What happened
NVD REST verified (published 2026-10-16, CVSS 8.8, CWE-434, fault-in fail-open extension check plus weak MIME detection). Authenticated low-privilege users can upload executable files to the server.
Why it matters
The plugin explicitly brands itself as an 'Automation, MCP & More' AI tool, so the WordPress host reaches AI/agent tooling. RCE from a subscriber account on the server hosting the MCP endpoint means an attacker can pivot from the web shell to the agent's MCP connector, credentials, and any downstream AI services the CRM talks to.
Attack vector
The store_upload function's extension allow-list fails open: extension_is_allowed() returns true when wp_check_filetype() yields an empty type for unrecognized extensions such as .php, combined with magic-byte-only MIME detection and no capability check beyond is_user_logged_in(). An authenticated subscriber uploads a file that is then executable by the server.
Affected systems
DoubleScale | All-in-One CRM – MCP & More (WordPress) ≤ 1.5.1 (Helpdesk module enabled)
Mitigation
Update DoubleScale past 1.5.1 (Wordfence advisory id 0feed03e-fedf-4443-94e0-fbb2c8baba71). Until patched, disable the Helpdesk module if unused.