Skip to content
OpenAdvisories

Vendor

verygoodplugins

1 known vulnerabilities.

Products

whatsapp-mcp 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-46555

    WhatsApp MCP: Unauthenticated bridge API allows message sending and arbitrary file exfiltration

    WhatsApp MCP Server is a Model Context Protocol (MCP) server for WhatsApp, enabling Claude to read and send WhatsApp messages. Prior to version 0.2.1, the `whatsapp-bridge` HTTP API listens on `127.0.0.1:8080` without authentication and without Host header va…

    verygoodplugins whatsapp-mcp