What happened
An incorrect-privilege-assignment vulnerability (CWE-266) in the MCP Server for WordPress allows privilege escalation. CVSS 3.1 8.8 (High) with High confidentiality/integrity/availability impact; published 2026-11-09 via Patchstack with the fix in 2.0.2.
Why it matters
This is an MCP server (in-scope agentic surface) whose privilege boundary is flawed, so a low-privileged user could gain control of the AI-agent integration and the tools it exposes to the LLM.
Attack vector
Incorrect Privilege Assignment (CWE-266) in the MCP Server for WordPress lets an authenticated low-privilege user escalate privileges, potentially gaining control of the WordPress MCP/agent surface
Affected systems
AtlasAiDev MCP Server for WordPress plugin ai-workflow-automation-ai-agent-hub through 2.0.1 (fixed in 2.0.2)
Mitigation
Update the ai-workflow-automation-ai-agent-hub plugin to version 2.0.2 or later; restrict who can register as the MCP/agent user on the WordPress site (https://patchstack.com/database/wordpress/plugin/ai-workflow-automation-ai-agent-hub/vulnerability/wordpress-mcp-server-for-wordpress-plugin-2-0-1-privilege-escalation-vulnerability)