AI Engine CVE-2026-8719

Successful exploitation requires the AI Engine plugin version 3.4.9 to be installed with MCP functionality enabled, and the attacker must have valid WordPress credentials (Subscriber role or higher). The vulnerability affects sites that allow user registration or have existing low-privileged accounts. Sites with registration disabled and no untrusted users are at lower risk. The MCP OAuth bearer-token functionality must be accessible for the privilege escalation to succeed.

The CVSS 3.1 score of 8.8 reflects high impact across confidentiality, integrity, and availability with low attack complexity and no user interaction required. The attack vector is network-based but requires low privileges (authenticated as Subscriber or higher), making this exploitable by any registered user on the WordPress site. EPSS data not provided, suggesting exploitation probability hasn't been assessed. No CISA KEV listing indicates no confirmed active exploitation. The high CVSS score is warranted given the complete privilege escalation to Administrator, but real-world risk depends on whether the site allows user registration and if MCP functionality is actively used.

An attacker registers as a Subscriber on the target WordPress site, obtains a valid OAuth token through normal authentication, then uses this token to access MCP admin tools that should require Administrator privileges. Through these MCP tools, the attacker can perform administrative actions and escalate their WordPress user role to Administrator, gaining full control of the site.