# ThinkRank AI SEO <= 2.17.1 - Unauthenticated Clickjacking via MCP OAuth Authorization Consent Page

- **ID:** WPSEC-2026-1653
- **Plugin:** ThinkRank AI SEO – AI SEO Plugin for WordPress: Schema, XML Sitemaps, Meta Tags, Search Console & Local SEO (`thinkrank`), https://wordpress.org/plugins/thinkrank/
- **Affected versions:** all versions before 2.18.0
- **Fixed in:** 2.18.0 (Update to 2.18.0 or later.)
- **Severity:** Medium 4.2 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N)
- **Weakness:** CWE-1021
- **Usage among sites WPSec scans:** plugin Medium, affected versions Medium (as of 2026-10-26)
- **Attack surface analysis:** https://attacksurface.wpsec.com/plugin/thinkrank
- **Fix released:** 2026-10-25
- **Published:** 2026-10-26
- **URL:** https://wpsec.com/vuln/WPSEC-2026-1653/

## Description

The ThinkRank AI SEO plugin for WordPress is vulnerable to Clickjacking in all versions up to, and including, 2.17.1 due to the MCP OAuth authorization consent page and its error page being served without X-Frame-Options or a frame-ancestors Content-Security-Policy header. This makes it possible for unauthenticated attackers to frame the consent page and trick a logged-in administrator into approving an attacker-registered OAuth client, granting that client MCP access to the site. Exploitation requires the MCP feature to be enabled and a victim to interact with an attacker-controlled page.

## References

- https://wpsec.com/vuln/WPSEC-2026-1653/
- https://plugins.svn.wordpress.org/thinkrank/tags/2.18.0/
- https://wordpress.org/plugins/thinkrank/

Source: WPSec, https://wpsec.com/vuln/WPSEC-2026-1653/

License: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Free to use, share and adapt, also commercially, if you credit WPSec and link to this advisory.