The MCP Server for WordPress plugin before version 1.8.2 fails to verify the WordPress REST API nonce for cookie‑authenticated requests when an attacker can influence a specific condition. This flaw allows an unauthenticated attacker to perform actions that normally require administrator privileges, such as creating a new administrator account, by tricking a logged‑in administrator into visiting a crafted page. The weakness is a form of Cross‑Site Request Forgery and is a serious example of improper authentication checks, resulting in privilege escalation and potential full site compromise.

WordPress sites that have installed the MCP Server for WordPress plugin in any version earlier than 1.8.2 are affected. The vulnerability exists in the plugin’s handling of REST API calls and is present when a condition controlled by the attacker is met, regardless of the specific WordPress theme or other plugins. Site owners using the plugin should verify their installation version and upgrade accordingly.

Because the flaw allows administrators to be tricked into creating new admin accounts, the risk of privilege escalation is high. The attack vector is purely browser‑based CSRF, which requires the attacker to entice a legitimate administrator to visit a malicious link; no special network access or credentials are needed. The EPSS score is < 1 % and the CVSS score of 8.8 indicates high severity; the vulnerability is not listed in the CISA KEV catalog, but the absence of these metrics does not reduce the inherent risk. Without a patch, an attacker can compromise sites that rely on MCP Server for WordPress by gaining full control of the administration interface through arbitrary account creation.