CVE-2026-15015 describes an authorization bypass vulnerability in the MountDev AI MCP Connector for WordPress plugin (versions up to and including 1.6.1). The vulnerability arises because the plugin fails to properly verify user authorization when processing OAuth client registrations and authorization requests. Attackers can register arbitrary OAuth clients via a publicly accessible Dynamic Client Registration endpoint without authentication, specifying attacker-controlled redirect URIs. They then leverage an unprotected authorization endpoint to complete the OAuth flow without any administrator interaction, thereby obtaining an administrator-bound OAuth Bearer token. This token grants full administrative access to the plugin's MCP tool surface and all exposed WordPress content, users, and options. The CVSS v3.1 base score is 9.8, reflecting the critical nature of this vulnerability with network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

An unauthenticated attacker can gain full administrator-equivalent access to the affected WordPress plugin and the underlying WordPress installation. This includes access to all plugin features, WordPress content, user accounts, and configuration options. The compromise could lead to complete site takeover, data disclosure, and site manipulation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been published at this time. Until a patch is available, restrict access to the plugin endpoints if possible and monitor for suspicious activity related to OAuth client registrations. Follow updates from the vendor for an official fix.