Executive Summary

This vulnerability exists in the AI Engine plugin for WordPress up to version 3.1.3. It occurs because the /mcp/v1/ REST API endpoint exposes the 'Bearer Token' when the 'No-Auth URL' feature is enabled. This allows unauthenticated attackers to obtain the bearer token, which can then be used to access a valid session and perform actions such as creating a new administrator account, resulting in privilege escalation.

Useful 0 Not Useful 0

Impact Analysis

An attacker exploiting this vulnerability can gain unauthorized access to a valid session by extracting the bearer token. This can lead to privilege escalation, including the creation of new administrator accounts, which compromises the security and control of the affected WordPress site.

Useful 0 Not Useful 0