{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/bytecorestack/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:bytecorestack:mcp_connector_for_ai_tools:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-19807"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["MCP Connector for AI Tools (\u003c= 1.2.3)"],"_cs_severities":["high"],"_cs_tags":["wordpress","privilege-escalation","web-application"],"_cs_type":"advisory","_cs_vendors":["ByteCoreStack"],"content_html":"\u003cp\u003eThe ByteCoreStack - MCP Connector for AI Tools plugin for WordPress, in all versions up to and including 1.2.3, contains a critical privilege escalation vulnerability. The flaw exists within the \u003ccode\u003eexecute_tool\u003c/code\u003e function when handling the \u003ccode\u003ewp_update_user_meta\u003c/code\u003e MCP tool. The implementation relies on \u003ccode\u003ecurrent_user_can('edit_user', $uid)\u003c/code\u003e for authorization, which, when the target user ID matches the caller ID, defaults to the 'read' primitive. Furthermore, the plugin utilizes an insufficient blocklist for user meta keys, explicitly blocking \u003ccode\u003euser_pass\u003c/code\u003e, \u003ccode\u003euser_activation_key\u003c/code\u003e, and \u003ccode\u003esession_tokens\u003c/code\u003e, but failing to protect \u003ccode\u003ewp_capabilities\u003c/code\u003e and \u003ccode\u003ewp_user_level\u003c/code\u003e. Authenticated users with Subscriber access can exploit this to overwrite their own meta keys, granting themselves Administrator-level privileges. This issue poses a severe risk to WordPress instances utilizing this AI-connector plugin, as it facilitates full site compromise through unauthorized administrative access.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of CVE-2026-19807 enables an authenticated Subscriber-level user to gain full Administrator control over the affected WordPress instance. This results in the potential for complete site takeover, including code execution via plugin installation, data exfiltration, and full database access. Given the nature of WordPress privileges, this vulnerability is critical for all installations currently using version 1.2.3 or earlier of the affected plugin.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately audit current ByteCoreStack MCP Connector plugin versions and restrict usage of the plugin until a vendor patch addressing the improper meta key validation is applied.\u003c/li\u003e\n\u003cli\u003eMonitor web server logs for suspicious requests to MCP JSON-RPC endpoints that include parameters containing 'wp_capabilities' or 'wp_user_level' meta keys.\u003c/li\u003e\n\u003cli\u003eEnable security audit logging for user metadata updates to identify unauthorized elevation attempts.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-01T08:39:43Z","date_published":"2026-10-01T08:39:43Z","id":"https://feed.craftedsignal.io/briefs/2026-10-bytecorestack-mcp-privesc/","summary":"The ByteCoreStack MCP Connector for AI Tools plugin for WordPress is vulnerable to privilege escalation via insufficient meta key validation, allowing Subscriber-level users to escalate to Administrator.","title":"CVE-2026-19807 Privilege Escalation in ByteCoreStack MCP Connector for AI Tools","url":"https://feed.craftedsignal.io/briefs/2026-10-bytecorestack-mcp-privesc/"}],"language":"en","title":"CraftedSignal Threat Feed - ByteCoreStack","version":"https://jsonfeed.org/version/1.1"}