100,000 WordPress Sites Affected by Privilege Escalation via MCP in AI Engine WordPress Plugin

Over 100,000 WordPress Sites Exposed to Privilege Escalation via MCP AI Engine

The Wordfence Threat Intelligence team identified a severe security flaw in the AI Engine plugin, a widely used tool installed on over 100,000 WordPress websites. This vulnerability, classified as an Insufficient Authorization to Privilege Escalation via Model Context Protocol (MCP), has a CVSS score of 8.8 (High) and has been assigned the identifier CVE-2025-5071. Affecting […] The post Over 100,000 WordPress Sites Exposed to Privilege Escalati…

WordPress ends security updates for versions 4.1 to 4.6

Upcoming Changes to WordPress Security Updates: What You Need to Know In a significant update for WordPress users worldwide, the WordPress Security Team has announced that starting from July 2025, they will no longer offer security updates for versions 4.1 through 4.6. These particular versions were initially launched over nine years ago, and today, more […]

100,000 WordPress Sites Affected by Privilege Escalation via MCP in AI Engine WordPress Plugin

On May 21st, 2025, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for an Insufficient Authorization to Privilege Escalation via MCP (Model Context Protocol) vulnerability in the AI Engine plugin, which is actively installed on more… Read more → The post 100,000 WordPress Sites Affected by Privilege Escalation via MCP in AI Engine WordPress Plugin appeared first on IT Security News.