Threats tagged 'ghsa-fq23-jr6g-77fx'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.7	EPSS 0.2%	CVE-2026-96526The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authorization check on one Low2.7EPSS 0.2%2026-09-26GCVE DatabaseCVE-2026-96526 The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authorization check on one of its workflow REST routes, allowing users with the Contributor role to disclose the title and publication status of any post, page or custom post type, including other users' private, draft, pending and scheduled content. EPSS 0.2%Report on CVE-2026-96526 Vulnerability CWE-200 #ghsa-fq23-jr6g-77fx	GCVE Database	2026-09-26

Page 1 of 1