# AI Engine <= 3.8.6 - Authenticated (Editor+) Missing Authorization to Restricted Content Creation and Media File Reference Modification via MCP Decoy 'fields' Object

- **ID:** WPSEC-2026-1575
- **Plugin:** AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini (`ai-engine`), https://wordpress.org/plugins/ai-engine/
- **Affected versions:** from 3.8.0 before 3.8.7
- **Fixed in:** 3.8.7 (Update to 3.8.7 or later.)
- **Severity:** Low 2.7 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)
- **Weakness:** CWE-863
- **Usage among sites WPSec scans:** plugin Low, affected versions Low (as of 2026-10-24)
- **Attack surface analysis:** https://attacksurface.wpsec.com/plugin/ai-engine
- **Fix released:** 2026-10-23
- **Published:** 2026-10-24
- **URL:** https://wpsec.com/vuln/WPSEC-2026-1575/

## Description

The AI Engine plugin for WordPress is vulnerable to Missing Authorization via the MCP wp_create_post and wp_update_post tools in versions 3.8.0 up to, and including, 3.8.6, due to the limited-session permission checks reading post_type, post_status and meta_input from a merged copy that a client-supplied 'fields' object can override, while the tools act on the top-level arguments, and due to post statuses being compared before they are lowercased. This makes it possible for authenticated attackers, with Editor-level access and above, connected over MCP OAuth when Editor Access is turned on, to create content of types they lack the capability for, publish it, write the protected media file reference meta keys such as _wp_attached_file, and move posts to the trash, all of which the limited session is meant to refuse.

## References

- https://wpsec.com/vuln/WPSEC-2026-1575/
- https://plugins.svn.wordpress.org/ai-engine/tags/3.8.7/
- https://wordpress.org/plugins/ai-engine/

Source: WPSec, https://wpsec.com/vuln/WPSEC-2026-1575/

License: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Free to use, share and adapt, also commercially, if you credit WPSec and link to this advisory.