CVE-2026-96524 | MCP Server Plugin up to 1.8.1 on WordPress WordPress REST API cross-site request forgery

A vulnerability marked as problematic has been reported in MCP Server Plugin up to 1.8.1 on WordPress. The affected element is an unknown function of the component WordPress REST API. The manipulation leads to cross-site request forgery.

This vulnerability is listed as CVE-2026-96524. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More