17 matches found
CVE-2026-109382
The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wspgetposts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate method accepts any...
EUVD-2026-102794
The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wspgetposts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate method accepts any...
CVE-2026-109382
The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to and including 2.9.5 . The flaw stems from broken access control where the wsp_get_posts MCP tool is registered with an empty capability requirement, and the authenticate() meth...
CVE-2026-109382 WSP MCP <= 2.9.5 - Authenticated (Subscriber+) Sensitive Information Disclosure via Broken Access Control to 'wsp_get_posts' MCP Tool
The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wspgetposts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate method accepts any...
CVE-2026-109382 WSP MCP <= 2.9.5 - Authenticated (Subscriber+) Sensitive Information Disclosure via Broken Access Control to 'wsp_get_posts' MCP Tool
The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wspgetposts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate method accepts any...
PT-2026-115490
The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wsp get posts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate method accepts any...
CVE-2026-109382: Incorrect Authorization
The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wspgetposts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate method accepts any...
WordPress WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agents plugin <= 2.9.5 - Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
Authenticated Subscriber+ Sensitive Information Disclosure vulnerability discovered by Wordfence PRISM in WordPress Plugin WSP MCP AI Agents Connector versions = 2.9.5...
WordPress WSP MCP Authorization Issue Vulnerability
WordPress WSP MCP 2.9.5 and earlier versions have an authorization issue. This issue arises from the fact that the permissions requirement is set to empty when the wspgetposts MCP tool is registered. The authenticate method of the MCP endpoint allows arbitrary logged-in users to access it...
CVE-2026-93529
Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...
EUVD-2026-85461
Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...
CVE-2026-93529 WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability
Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...
CVE-2026-93529
The WSP MCP – AI Agents Connector plugin for WordPress versions ≤ 2.7.0 is affected by a Broken Access Control vulnerability. The vulnerability specifically affects contributors , which may allow for unauthorized actions or data modification due to improper permission enforcement. No specific roo...
CVE-2026-93529 WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability
Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...
WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability
WordPress WSP MCP - AI Agents Connector plugin = 2.7.0 - Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WSP MCP AI Agents Connector versions = 2.7.0...
PT-2026-97446
Name of the Vulnerable Software and Affected Versions WSP MCP – AI Agents Connector versions prior to 2.7.1 Description Broken access control allows contributors to perform unauthorized actions within the system. Recommendations Update WSP MCP – AI Agents Connector to version 2.7.1 or later...