Vulnerability · Published May 17, 2026 · Assigned by Wordfence
CVE-2026-8719AI Engine 3.4.9 - Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer Token
High 8.8
In plain English
A high-severity privilege mismanagement in AI Engine – The Chatbot, AI Framework & MCP for WordPress from tigroumeow. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Official description
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Privilege Escalation in version 3.4.9. This is due to missing WordPress capability enforcement in the MCP OAuth bearer-token authorization path, where any valid OAuth token causes MCP access to be granted without verifying administrator privileges. This makes it possible for authenticated (Subscriber+) attackers to invoke admin-level MCP tools and escalate privileges to Administrator.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| tigroumeow | AI Engine – The Chatbot, AI Framework & MCP for WordPress | 3.4.9 |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H