Agentimus Ai Seo Llms Txt Amp Mcp For Ai Agents
Monthly
Broken access control in the Agentimus AI SEO, llms.txt & MCP for AI Agents WordPress plugin (versions <= 1.51.0) allows any subscriber-level authenticated user to perform privileged administrative actions. The plugin fails to enforce capability checks on one or more endpoints, enabling low-privilege users to read or modify sensitive plugin data - including AI SEO configuration, llms.txt content, and MCP agent settings. No public exploit is identified at time of analysis, but the low authentication bar (subscriber registration is typically open on WordPress sites) makes this broadly exploitable wherever the plugin is installed.
Broken access control in the Agentimus AI SEO, llms.txt & MCP for AI Agents WordPress plugin (versions <= 1.51.0) allows any subscriber-level authenticated user to perform privileged administrative actions. The plugin fails to enforce capability checks on one or more endpoints, enabling low-privilege users to read or modify sensitive plugin data - including AI SEO configuration, llms.txt content, and MCP agent settings. No public exploit is identified at time of analysis, but the low authentication bar (subscriber registration is typically open on WordPress sites) makes this broadly exploitable wherever the plugin is installed.