MediumVulnerability
CVE-2026-109382: WSP MCP AI Agents Connector plugin for WordPress exposes unpublished posts
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-109382
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
The WSP MCP AI Agents Connector plugin for WordPress, versions up to and including 2.9.5, exposes unpublished content. The wsp_get_posts MCP tool is registered with an empty capability requirement, and the callback honours a caller-supplied status=all argument with no author or ownership filter. Authenticated users with Subscriber-level access or above can read titles, URLs, authors, categories, tags and 40-word excerpts of all draft, pending and scheduled posts.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Topics
Related items
- InfoTADR: Threat-Aligned Data Refinement against label-flipping attacks in AI-powered Intrusion Detection SystemsSimilar attack · Elsevier Security Journals
- MediumOpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish TasksSimilar attack · SecurityWeek
- LowMalware evasion made easier with AI — but behavior still gives it awaySimilar attack · CSO Online
- HighCVE-2026-111451: Wheels CLI deploy, package and generator inputs allow shell command executionSimilar attack · NVD/CVE Database
- CriticalCVE-2026-111322: Archon missing authentication exposes control API to unauthenticated attackersSimilar attack · NVD/CVE Database