Advisories · Technology
MCP Server for WordPress.
Every CVE that names MCP Server for WordPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.7 Low
MCP Server for WordPress < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure via workflows/run REST Route
- MCP Server for WordPress
- Information disclosure
- CVSS 2.7 Low
MCP Server for WordPress < 1.8.2 - Contributor+ Workflow Modification and Deletion via Missing Ownership Check
- MCP Server for WordPress
- Broken access control
- CVSS 8.8 High
MCP Server for WordPress < 1.8.2 - Administrator Account Creation via CSRF
- MCP Server for WordPress
- Cross-site request forgery (CSRF)