CVE-2026-125771

Published 15 November 2026 · tracked since 15 November 2026

Description

Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.This issue affects MCP Server for WordPress: from n/a through 2.0.3.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-125795 CRITICAL 9.8
• CVE-2026-129482 MEDIUM 4.8
• CVE-2026-125449 HIGH 8.8
• CVE-2026-122662 CRITICAL 9.8
• CVE-2026-82663 HIGH 7.5
• CVE-2026-82568 HIGH 7.5
• CVE-2026-129349
• CVE-2026-129444 CRITICAL 10
• CVE-2026-129443 MEDIUM 6.3
• CVE-2026-127048

→ Open the live CVE board · all tools