OAuth Token Mishandling Enables Unauthorized Admin Access

The AI Copilot WordPress plugin before 1.5.4 does not bind OAuth access tokens to a WordPress user, and accepts any valid token as an administrator session, allowing unauthenticated attackers who complete the public OAuth flow to execute privileged MCP tools as an administrator, including arbitrary user creation and role escalation.

Casky was already ahead

This CVE exploits attack patterns that Casky's 224matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

The AI Copilot WordPress plugin before version 1.5.4 contains a critical authentication bypass vulnerability where OAuth access tokens are not properly bound to individual WordPress users. This allows any attacker who completes the public OAuth flow to gain administrative session privileges, regardless of their actual identity or permissions. The vulnerability is particularly severe because it enables execution of privileged MCP (Model Context Protocol) tools with administrator rights, including arbitrary user creation and role escalation—effectively granting complete control over affected WordPress installations. Organizations using this plugin with public-facing WordPress sites or those relying on the plugin's AI capabilities for content management face immediate risk of account takeover, data breach, and system compromise.

Casky's 224 mapped security skills leverage Claude AI with extended reasoning to detect the attack patterns underlying this OAuth binding failure. Practitioners using Casky would identify suspicious activity through TA0004 (Privilege Escalation) detection, specifically recognizing the behavioral signature of tokens being accepted without user validation and unauthorized administrative actions being performed. The platform's skills would flag anomalous patterns such as OAuth completions followed immediately by user creation events, role modifications, or MCP tool invocations—all hallmarks of the CWE-269 (Improper Authentication) weakness. Security teams would see findings highlighting the disconnect between token origin and actual user identity, unauthenticated session establishment, and privilege elevation without corresponding credential validation, enabling rapid identification and remediation before attackers establish persistent administrative access.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

224 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-9810.

abusing-dpapi-for-credential-access

red teaming · high

Run

abusing-shadow-credentials-for-privesc

red teaming · high

Run

Access with Stolen Session Cookie

penetration testing · medium

Run

MITRE ATT&CK Techniques

TA0004

Investigate the attack patterns behind CVE-2026-9810

Casky has 224 skills that investigate the attack patterns behind CVE-2026-9810. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn