Mcp Server For Wordpress (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-26. Vendor: Unknown.

CVEs of Mcp Server For Wordpress

• CVE-2026-96524 - CVSS 8.8 (high), 2026-09-26: The MCP Server for WordPress WordPress plugin before 1.8.2 does not correctly verify the WordPress REST API nonce for cookie-authenticated requests when a…
• CVE-2026-96526 - CVSS 2.7 (low), 2026-09-26: The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authorization check on one of its workflow REST routes, allowing…
• CVE-2026-96525 - CVSS 2.7 (low), 2026-09-26: The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an ownership or sufficient capability check on its workflow create, update and…