{
 "id": "WPSEC-2026-1576",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1576/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1576/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1576/index.md",
 "title": "AI Engine <= 3.8.6 - Unauthenticated Clickjacking via MCP OAuth Consent Page",
 "description": "The AI Engine plugin for WordPress is vulnerable to Clickjacking via the MCP OAuth authorization consent page in versions 3.4.9 up to, and including, 3.8.6, due to the page being sent without X-Frame-Options or Content-Security-Policy frame-ancestors headers. Any client can register through Dynamic Client Registration, so this makes it possible for unauthenticated attackers to load the consent page for their own client in a hidden frame and trick a logged-in administrator into clicking Approve. The authorization code is then sent to the attacker's redirect URI, which gives the attacker an MCP access token carrying the administrator's privileges. Exploitation requires the MCP server to be enabled, the victim to interact with the page, and a browser that sends WordPress cookies to framed cross-site pages.",
 "plugin": {
  "slug": "ai-engine",
  "name": "AI Engine",
  "full_name": "AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini",
  "wordpress_org": "https://wordpress.org/plugins/ai-engine/",
  "advisories_url": "https://wpsec.com/vuln/plugin/ai-engine/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/ai-engine"
 },
 "type": "CSRF",
 "cwe": [
  "CWE-1021"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 7.5,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "severity": "High"
 },
 "affected": {
  "ranges": [
   {
    "from": "3.4.9",
    "from_inclusive": true,
    "to": "3.8.7",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 3.4.9 before 3.8.7"
  ]
 },
 "introduced_in": "3.4.9",
 "fixed_in": "3.8.7",
 "remediation": "Update to 3.8.7 or later.",
 "fix_released": "2026-10-23T03:28:03+00:00",
 "published": "2026-10-24T03:40:50+00:00",
 "updated": "2026-10-23T09:45:30.192043+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1576/",
  "https://plugins.svn.wordpress.org/ai-engine/tags/3.8.7/",
  "https://wordpress.org/plugins/ai-engine/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/ai-engine",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-10-24"
 }
}