SiteGround AI Agent WordPress Plugin - Broken Access Control on Media Upload Endpoint
First seen Aug 20, 2026 · Updated Aug 20, 2026 · CVSS 5.3
The 'AI Agent by SiteGround' WordPress plugin fails to verify the upload_files capability on a media upload endpoint tied to its AI/Gutenberg block editor features, allowing low-privileged Contributor-level accounts to upload arbitrary images to the media library despite normally lacking that permission. This is a classic broken access control flaw in a plugin's admin-ajax/REST handler rather than an attack on the AI model or agent reasoning itself, and requires authenticated access at Contributor level or above.
Technical Analysis
The vulnerable endpoint validates only a nonce (sg_ai_studio_gutenberg_nonce) that WordPress issues to any user with block editor access, including Contributors, but omits the standard WordPress capability check for upload_files. Since nonce validation alone does not enforce authorization, any authenticated Contributor can call the endpoint directly to upload media files, bypassing the intended role-based restriction. The entry point is a plugin-registered REST/AJAX route associated with the 'AI Agent' block editor integration; the impact is limited to unauthorized media uploads (potential for stored malicious files, storage abuse, or SEO/spam injection) rather than remote code execution or cross-agent compromise. This does not appear to cross agent-to-agent trust boundaries or involve LLM prompt manipulation — it is a conventional CMS plugin authorization bug that happens to carry an 'AI Agent' product name.
Affected Systems
AI Agent by SiteGround (WordPress plugin, versions <= 1.2.7)
Detection Signatures
- Requests to plugin's media upload endpoint containing sg_ai_studio_gutenberg_nonce from users with Contributor role or below
- Unexpected media library uploads authored by low-privileged WordPress accounts
- Absence of current_user_can('upload_files') check in server logs/plugin code paths handling AI Studio Gutenberg upload actions
Remediation Steps
- 1
Update the plugin
Upgrade AI Agent by SiteGround to a patched version beyond 1.2.7 once released, which should enforce upload_files capability checks server-side.
- 2
Restrict Contributor uploads
Until patched, audit and restrict Contributor-level accounts, or use a security plugin to block direct calls to the vulnerable endpoint.
- 3
Monitor media library
Review recently uploaded media for unauthorized or unexpected files uploaded by non-Author/Editor accounts.
- 4
Apply least privilege
Limit the number of users with Contributor-level access and review role assignments periodically.
CVE / Advisory IDs
Industries Most Exposed
Respond to this threat
Pro subscribers get a full AI-generated incident-response playbook for this threat — detection, containment, eradication, and recovery steps — plus an unlimited AI Threat Advisor for questions about your environment.