The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin version 3.4.9 contains a privilege escalation vulnerability (CWE-269) due to improper privilege management. Specifically, the MCP OAuth bearer-token authorization path does not enforce WordPress capability checks, allowing any valid OAuth token to bypass administrator privilege verification. This flaw enables authenticated users with Subscriber or higher roles to gain administrator-level access by invoking MCP admin tools, potentially compromising the WordPress site.

Successful exploitation allows authenticated users with Subscriber or higher privileges to escalate their access to Administrator level. This can lead to full control over the WordPress site, including content modification, plugin/theme changes, and potential site takeover. The CVSS v3.1 score is 8.8 (High), reflecting the network attack vector, low attack complexity, required privileges at the Subscriber level, no user interaction, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Until a patch is released, restrict OAuth token issuance to trusted users only and monitor for suspicious use of MCP admin tools. Avoid granting OAuth tokens to users who do not require elevated privileges. Follow vendor communications closely for updates on remediation.