WordPress OAuth Client Registration Missing Authorization

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.8.6 This is due to the MCP module's OAuth 2.1 Dynamic Client Registration endpoint (/wp-json/mcp/v1/oauth/register) being registered with a permission_callback of __return_true, allowing an unauthenticated user to register an active OAuth client with an attacker-controlled redirect URI. This makes it possible for unauthenticated attackers to obtain an administrator-bound MCP access token, and thereby full administrator-level control through the MCP tools (including user creation and option updates), once an administrator approves the attacker's client on the OAuth consent screen. The consent page is additionally served without X-Frame-Options or Content-Security-Policy frame-ancestors, so that approval can be obtained via clickjacking.

Casky was already ahead

This CVE exploits attack patterns that Casky's 283matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

The AI Engine WordPress plugin contains a critical authorization bypass in its OAuth 2.0 Dynamic Client Registration endpoint. By registering the endpoint with a permission callback that unconditionally returns true, the plugin allows unauthenticated attackers to create valid OAuth clients with arbitrary redirect URIs. This vulnerability affects all WordPress installations using the plugin up to version 3.8.6 and opens the door to account takeover attacks, credential theft, and lateral movement within WordPress environments. Organizations running this plugin are immediately at risk of unauthorized access to sensitive WordPress administrative functions and user data.

Casky's 283 mapped skills detect the attack patterns associated with this vulnerability across MITRE ATT&CK's TA0004 (Privilege Escalation) and TA0006 (Credential Access) tactics. Practitioners using Casky would identify suspicious patterns including: unauthenticated requests to the MCP OAuth registration endpoint, detection of newly registered OAuth clients with external redirect URIs, and anomalous token generation activities. Claude's extended reasoning capabilities enable correlation of these indicators—recognizing that an unauthenticated registration followed by token requests to attacker-controlled domains signals a credential harvesting campaign. Security teams would see findings highlighting CWE-862 (Missing Authorization) violations, flagged API endpoints with insufficient permission validation, and behavioral anomalies consistent with OAuth flow hijacking attempts used in phishing or account compromise scenarios.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

283 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-110732.

abusing-dpapi-for-credential-access

red teaming · high

Run

abusing-shadow-credentials-for-privesc

red teaming · high

Run

Access with Stolen Session Cookie

identity access management · low

Run

MITRE ATT&CK Techniques

TA0004 TA0006

Investigate the attack patterns behind CVE-2026-110732

Casky has 283 skills that investigate the attack patterns behind CVE-2026-110732. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn