{
 "id": "WPSEC-2026-1559",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1559/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1559/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1559/index.md",
 "title": "Agentimus – AI SEO, llms.txt & MCP for AI Agents <= 1.53.3 - Authenticated (MCP Connection Key Holder) Privilege Escalation via MCP Credential Accepted Outside the REST API",
 "description": "The Agentimus – AI SEO, llms.txt & MCP for AI Agents plugin for WordPress is vulnerable to Privilege Escalation via the MCP connection token and OAuth access token authentication in versions 1.32.0 up to, and including, 1.53.3. The cause is that the plugin decides whether a request targets the MCP endpoint only from the rest_route parameter or the tail of the URL path, on any entry point. On admin-ajax.php, admin-post.php or wp-login.php no REST dispatch takes place, so the check that limits a credential to the MCP endpoint never runs there. This makes it possible for anyone holding a connection key or an approved assistant's access token, including a read-only one, to act as the credential's owner (typically an administrator) on arbitrary admin-ajax and admin-post handlers. The site must have a connection key or an approved OAuth grant.",
 "plugin": {
  "slug": "agentimus",
  "name": "Agentimus – AI SEO, llms.txt & MCP for AI Agents",
  "full_name": "Agentimus – AI SEO, llms.txt & MCP for AI Agents",
  "wordpress_org": "https://wordpress.org/plugins/agentimus/",
  "advisories_url": "https://wpsec.com/vuln/plugin/agentimus/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/agentimus"
 },
 "type": "PRIV",
 "cwe": [
  "CWE-863"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 8.8,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "severity": "High"
 },
 "affected": {
  "ranges": [
   {
    "from": "1.32.0",
    "from_inclusive": true,
    "to": "1.53.4",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 1.32.0 before 1.53.4"
  ]
 },
 "introduced_in": "1.32.0",
 "fixed_in": "1.53.4",
 "remediation": "Update to 1.53.4 or later.",
 "fix_released": "2026-10-22T19:22:06+00:00",
 "published": "2026-10-23T19:41:28+00:00",
 "updated": "2026-10-23T07:09:57.152293+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1559/",
  "https://plugins.svn.wordpress.org/agentimus/tags/1.53.4/",
  "https://wordpress.org/plugins/agentimus/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/agentimus",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-10-23"
 }
}