WSP MCP AI Agents Connector
by WordPress
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-109382 | Med | 0.42 | 6.5 | 0.00 | Oct 16, 2026 | The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wsp_get_posts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate()… | ||
| CVE-2026-93529 | Med | 0.42 | 6.5 | 0.00 | Sep 23, 2026 | Contributor Broken Access Control in WSP MCP – AI Agents Connector <= 2.7.0 versions. |
- risk 0.42cvss 6.5epss 0.00
The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wsp_get_posts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate()…
- risk 0.42cvss 6.5epss 0.00
Contributor Broken Access Control in WSP MCP – AI Agents Connector <= 2.7.0 versions.