Unknown MCP Server for WordPress

3 known vulnerabilities in Unknown MCP Server for WordPress, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-96526 CVSS 2.7 low The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authorization check on one of its workflow…
  • CVE-2026-96525 CVSS 2.7 low The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an ownership or sufficient capability check on its workflow…
  • CVE-2026-96524 CVSS 8.8 high The MCP Server for WordPress WordPress plugin before 1.8.2 does not correctly verify the WordPress REST API nonce for cookie-authenticated…