IATO MCP EUVD-2026-92952

Exploitation requires an authenticated WordPress account with at least Contributor role on a site running the IATO MCP plugin version 1.11.0 or earlier; the vulnerable code path performs a privileged action without a proper authorization/capability check (CWE-862). Limiting factors: the attacker must already hold valid Contributor credentials, so sites that disable open user registration and tightly manage roles are substantially less exposed; no user interaction is required (UI:N) and impact is confined to integrity (C:N/A:N), not data disclosure or availability.

This is a moderate-priority, authenticated access-control flaw rather than a critical remote threat. The provided CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N) shows network reachability with low attack complexity but requires low-level authenticated privileges - consistent with the description's reference to a Contributor-level user, meaning an attacker must already hold a valid WordPress Contributor (or higher) account. The impact is scoped to integrity only (C:N/I:H/A:N via CWE-862 Missing Authorization), so this enables unauthorized modification/actions rather than data theft or outages. No EPSS score, no CISA KEV listing, and no POC indicator were provided, so there is no evidence of active exploitation or weaponization. The practical risk is therefore a privilege-boundary violation exploitable by any account that can register or be granted Contributor rights - elevated on sites with open user registration, lower on tightly controlled single-author sites. Signals are internally consistent (no CVSS-vs-description conflict); the main limiting factor is the authenticated prerequisite, which keeps this below the urgency of an unauthenticated flaw despite the network vector.

An attacker obtains or registers a low-privilege WordPress Contributor account on a site running IATO MCP <= 1.11.0, then invokes a plugin function that fails to verify the caller's authorization (CWE-862). Because the missing authorization check lets a Contributor perform actions reserved for higher roles, the attacker modifies plugin-controlled state or data beyond their intended permission level. No public exploit code was identified at time of analysis.