Vendor

Bilal Naseer

2 known vulnerabilities.

Products

WSP MCP – AI Agents Connector 1 WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agents 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.5

CVE-2026-109382

WSP MCP <= 2.9.5 - Authenticated (Subscriber+) Sensitive Information Disclosure via Broken Access Control to 'wsp_get_posts' MCP Tool

The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wsp_get_posts MCP tool being registered with an empty capability requirement while the MCP endpo…

Bilal Naseer WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agents Web / CMS

Oct 16, 2026
Medium 6.5

CVE-2026-93529

WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability

Contributor Broken Access Control in WSP MCP – AI Agents Connector <= 2.7.0 versions.

Bilal Naseer WSP MCP – AI Agents Connector

Sep 23, 2026