CVE-2026-96525 | MCP Server Plugin up to 1.8.1 on WordPress Rest Routes authorization

September 26, 2026 Yanac

A vulnerability described as critical has been identified in MCP Server Plugin up to 1.8.1 on WordPress. The impacted element is an unknown function of the component Rest Routes. The manipulation results in missing authorization.

This vulnerability is cataloged as CVE-2026-96525. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More