What’s Vulnerable › Products

MCP Server for WordPress vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your MCP Server for WordPress version is affected

Latest MCP Server for WordPress vulnerabilities

• CVE-2026-96526 — MCP Server for WordPress < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure via workflows/run REST Route (CVSS 2.7)
• CVE-2026-96525 — MCP Server for WordPress < 1.8.2 - Contributor+ Workflow Modification and Deletion via Missing Ownership Check (CVSS 2.7)
• CVE-2026-96524 — MCP Server for WordPress < 1.8.2 - Administrator Account Creation via CSRF (CVSS 8.8)