CVE-2026-121576

A WordPress subscriber could gain administrative privileges through the MCP plugin

Patchstack / AtlasAiDev · MCP Server for WordPress

First documented disclosure · Review checkpoint

Summary

A low-privilege WordPress user could gain administrative control through the affected MCP integration.

Severity and exploitation evidence

High · 8.8/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed sources describe the vulnerability and its conditions. They do not identify malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The plugin assigned privileges incorrectly. Patchstack does not disclose the vulnerable operation.

Conditions required

The attacker needs a WordPress account with Subscriber access or higher.

Potential impact

Administrative access could expose or change site data and settings.

Affected versions and configurations

Through 2.0.1.

Fix and mitigation status

2.0.2.

Practical next steps

Update the plugin to 2.0.2 or later and check administrator role assignments on affected sites.

Operating lesson

Require server-side checks whenever an MCP integration grants a WordPress capability.

Evidence and limits

Patchstack rates exploitation risk high but does not report an actual compromise of this CVE.

Sources