CyberSecBulletin

MCP Server for WordPress vulnerabilities

We track 1 vulnerability in MCP Server for WordPress products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 26, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest MCP Server for WordPress vulnerabilities

  • 8.8 High severity

    MCP Server for WordPress: Cross-Site Request Forgery

    CVE-2026-96524MCP Server for WordPress

    The MCP Server for WordPress WordPress plugin before 1.8.2 does not correctly verify the WordPress REST API nonce for cookie-authenticated requests when a condition an attacker can influence is present, allowing unauthenticated attackers to perform administrat