CVE-2026-110732 | tigroumeow AI Engine Plugin up to 3.8.6 on WordPress MCP module register __return_true improper authorization

October 30, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in tigroumeow AI Engine Plugin up to 3.8.6 on WordPress. Impacted is the function __return_true of the file /wp-json/mcp/v1/oauth/register of the component MCP module. Performing a manipulation results in improper authorization.

This vulnerability is identified as CVE-2026-110732. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More