AI Engine <= 3.8.6 - Authenticated (Editor+) Missing Authorization to Restricted Content Creation and Media File Reference Modification via MCP Decoy 'fields' Object
- ID
- WPSEC-2026-1575
- Plugin
- AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini (ai-engine)
- Affected
- from 3.8.0 before 3.8.7
- Remediation
- Update to 3.8.7 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
- Weakness
- CWE-863
- Usage
- Plugin Low · Affected versions Low among sites WPSec scans, 2026-10-23
- Attack surface
- AI Engine on WPSec AttackSurface
- Fix released
- Published
Description
The AI Engine plugin for WordPress is vulnerable to Missing Authorization via the MCP wp_create_post and wp_update_post tools in versions 3.8.0 up to, and including, 3.8.6, due to the limited-session permission checks reading post_type, post_status and meta_input from a merged copy that a client-supplied 'fields' object can override, while the tools act on the top-level arguments, and due to post statuses being compared before they are lowercased. This makes it possible for authenticated attackers, with Editor-level access and above, connected over MCP OAuth when Editor Access is turned on, to create content of types they lack the capability for, publish it, write the protected media file reference meta keys such as _wp_attached_file, and move posts to the trash, all of which the limited session is meant to refuse.
References
- https://wpsec.com/vuln/WPSEC-2026-1575/
- https://plugins.svn.wordpress.org/ai-engine/tags/3.8.7/
- https://wordpress.org/plugins/ai-engine/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS