Privilege Escalation in ByteCoreStack MCP Connector for AI Tools Plugin for WordPress

CVE-2026-19807

What is CVE-2026-19807?

The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress has a vulnerability that allows authenticated users, including those with Subscriber-level access, to elevate their privileges to Administrator. This occurs due to the improper implementation of permission checks in the execute_tool function, where the current_user_can('edit_user', $uid) check fails to properly restrict access. Specifically, while the plugin enforces a limited blocklist of meta keys, it neglects critical keys like wp_capabilities and wp_user_level, enabling attackers to craft a malicious request through the MCP JSON-RPC endpoint. By targeting their own user ID with a wp_update_user_meta call, malicious actors can assign themselves Administrator privileges, leading to unauthorized control over the WordPress site.

References