Medium · 6.5 CVE-2026-93529 EUVD-2026-85461GHSA-95hq-cf2h-gc58

WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability

Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack

Vendor: Bilal Naseer Product: WSP MCP – AI Agents Connector

Description

Contributor Broken Access Control in WSP MCP – AI Agents Connector <= 2.7.0 versions.

Affected products

Vendor	Product	Affected	Fixed
Bilal Naseer	WSP MCP – AI Agents Connector	≤ 2.7.0	—

References

https://patchstack.com/database/wordpress/plugin/wsp-mcp-ai-agents-connector/vulnerability/wordpress-wsp-mcp-8211-ai-agents-connector-plugin-2-7-0-broken-access-control-vulnerability?_s_id=cve vdb-entry