Skip to content
OpenAdvisories

Vendor

bytecorestack

1 known vulnerabilities.

Products

ByteCoreStack – MCP Connector for AI Tools 1
All Critical High Medium Low Exploited only

1 result · Feed

  • High 8.8
    CVE-2026-19807

    ByteCoreStack <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via wp_update_user_meta MCP Tool

    The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3 This is due to the `wp_update_user_meta` MCP tool in `execute_tool` gating writes solely with `current_user_c…

    bytecorestack ByteCoreStack – MCP Connector for AI Tools Web / CMS