ThinkRank AI SEO <= 2.17.1 - Unauthenticated Clickjacking via MCP OAuth Authorization Consent Page

ID

WPSEC-2026-1653

Plugin

ThinkRank AI SEO – AI SEO Plugin for WordPress: Schema, XML Sitemaps, Meta Tags, Search Console & Local SEO (thinkrank)

Affected

all versions before 2.18.0

Remediation

Update to 2.18.0 or later.

CVSS 3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Weakness

CWE-1021

Usage

Plugin Medium · Affected versions Medium among sites WPSec scans, 2026-10-26

Attack surface

ThinkRank AI SEO on WPSec AttackSurface

Fix released

2026-10-25

Published

2026-10-26

Description

The ThinkRank AI SEO plugin for WordPress is vulnerable to Clickjacking in all versions up to, and including, 2.17.1 due to the MCP OAuth authorization consent page and its error page being served without X-Frame-Options or a frame-ancestors Content-Security-Policy header. This makes it possible for unauthenticated attackers to frame the consent page and trick a logged-in administrator into approving an attacker-registered OAuth client, granting that client MCP access to the site. Exploitation requires the MCP feature to be enabled and a victim to interact with an attacker-controlled page.

References

• https://wpsec.com/vuln/WPSEC-2026-1653/
• https://plugins.svn.wordpress.org/thinkrank/tags/2.18.0/
• https://wordpress.org/plugins/thinkrank/

Published by WPSec. Provided as is, without warranty. Corrections: contact us.

This advisory as JSON or Markdown · All advisories: JSON, RSS