Aeonrisk

**Name of the Vulnerable Software and Affected Versions** MountDev AI MCP Connector for WordPress versions prior to 1.6.2 **Description** An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Unauthenticated attackers can obtain an administrator-bound OAuth Bearer token by using a self-registered client. This grants full administrator-equivalent access to the plugin's MCP tool surface, as well as all exposed WordPress content, users, and options. The issue is exploited by combining the publicly accessible Dynamic Client Registration endpoint, which allows the registration of arbitrary OAuth clients with an attacker-controlled `redirect uri`, and the unprotected authorization endpoint to complete the OAuth flow without administrator interaction. **Recommendations** Update MountDev AI MCP Connector for WordPress to version 1.6.2 or later.