Medium · 6.5 CVE-2026-85306 EUVD-2026-70556GHSA-vfr3-w6gw-h5gr

WordPress MountDev AI MCP Connector for WordPress plugin <= 1.6.5 - Broken Access Control vulnerability

Published Sep 3, 2026 · Updated Sep 4, 2026 · Assigned by Patchstack

Vendor: Cascadia Web Services Product: MountDev AI MCP Connector for WordPress Category: Web / CMS

Description

Missing Authorization vulnerability in Cascadia Web Services MountDev AI MCP Connector for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects MountDev AI MCP Connector for WordPress: from n/a through 1.6.5.

Affected products

Vendor	Product	Affected	Fixed
Cascadia Web Services	MountDev AI MCP Connector for WordPress	≤ 1.6.5	—

References

https://patchstack.com/database/wordpress/plugin/mountdev-ai-mcp-connector/vulnerability/wordpress-mountdev-ai-mcp-connector-for-wordpress-plugin-1-6-5-broken-access-control-vulnerability?_s_id=cve vdb-entry