https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:11:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-16384 bdu:2025-16384 https://cve.radiocsirt.org/vuln/bdu:2025-16384 https://cve.radiocsirt.org/vuln/cnvd-2025-14265 cnvd-2025-14265 https://cve.radiocsirt.org/vuln/cnvd-2025-14265 https://cve.radiocsirt.org/vuln/euvd-2026-245168 EUVD-2026-245168 https://cve.radiocsirt.org/vuln/euvd-2026-245168 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5071 <p>The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the &#39;Meow_MWAI_Labs_MCP::can_access_mcp&#39; function in versions 2.8.0 to 2.8.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to have full access to the MCP and run various commands like &#39;wp_create_user&#39;, &#39;wp_update_user&#39; and &#39;wp_update_option&#39;, which can be used for privilege escalation, and &#39;wp_update_post&#39;, &#39;wp_delete_post&#39;, &#39;wp_update_comment&#39; and &#39;wp_delete_comment&#39;, which can be used to edit and delete posts and comments.</p> <p>The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the &#39;Meow_MWAI_Labs_MCP::can_access_mcp&#39; function in versions 2.8.0 to 2.8.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to have full access to the MCP and run various commands like &#39;wp_create_user&#39;, &#39;wp_update_user&#39; and &#39;wp_update_option&#39;, which can be used for privilege escalation, and &#39;wp_update_post&#39;, &#39;wp_delete_post&#39;, &#39;wp_update_comment&#39; and &#39;wp_delete_comment&#39;, which can be used to edit and delete posts and comments.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-5071 https://cve.radiocsirt.org/vuln/ghsa-gg23-wpg2-g99p <p>The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the &#39;Meow_MWAI_Labs_MCP::can_access_mcp&#39; function in versions 2.8.0 to 2.8.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to have full access to the MCP and run various commands like &#39;wp_create_user&#39;, &#39;wp_update_user&#39; and &#39;wp_update_option&#39;, which can be used for privilege escalation, and &#39;wp_update_post&#39;, &#39;wp_delete_post&#39;, &#39;wp_update_comment&#39; and &#39;wp_delete_comment&#39;, which can be used to edit and delete posts and comments.</p> <p>The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the &#39;Meow_MWAI_Labs_MCP::can_access_mcp&#39; function in versions 2.8.0 to 2.8.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to have full access to the MCP and run various commands like &#39;wp_create_user&#39;, &#39;wp_update_user&#39; and &#39;wp_update_option&#39;, which can be used for privilege escalation, and &#39;wp_update_post&#39;, &#39;wp_delete_post&#39;, &#39;wp_update_comment&#39; and &#39;wp_delete_comment&#39;, which can be used to edit and delete posts and comments.</p> https://cve.radiocsirt.org/vuln/ghsa-gg23-wpg2-g99p