CVE-2026-19807

Name of the Vulnerable Software and Affected Versions ByteCoreStack – MCP Connector for AI Tools versions prior to 1.2.4

Description Authenticated users with Subscriber-level access or higher can elevate their privileges to Administrator. The issue exists in the execute tool function within the wp update user meta MCP tool, which uses an insufficient check current user can('edit user', $uid). Because WordPress core resolves this check to a read primitive when a user targets their own ID, and the plugin uses an incomplete blocklist for meta keys that fails to protect wp capabilities and wp user level, attackers can modify their own roles. This is achieved by sending a request to the MCP JSON-RPC endpoint using the key parameter set to wp capabilities with an administrator role array.

Recommendations Update to a version later than 1.2.3. Restrict access to the MCP JSON-RPC endpoint to minimize the risk of exploitation.