High · 8.8 CVE-2026-121576 EUVD-2026-120118GHSA-qfxj-2x5m-gvvg

WordPress MCP Server for WordPress plugin <= 2.0.1 - Privilege Escalation vulnerability

Published Nov 9, 2026 · Updated Nov 9, 2026 · Assigned by Patchstack

Vendor: AtlasAiDev Product: MCP Server for WordPress Category: Web / CMS

Description

Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.This issue affects MCP Server for WordPress: from n/a through 2.0.1.

Affected products

Vendor	Product	Affected	Fixed
AtlasAiDev	MCP Server for WordPress	≤ 2.0.1	—

References

https://patchstack.com/database/wordpress/plugin/ai-workflow-automation-ai-agent-hub/vulnerability/wordpress-mcp-server-for-wordpress-plugin-2-0-1-privilege-escalation-vulnerability?_s_id=cve vdb-entry