https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:10:50 +0000 https://cve.radiocsirt.org/vuln/cve-2025-5071 <p><strong>Affected:</strong> tigroumeow AI Engine</p> <p>The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the &#39;Meow_MWAI_Labs_MCP::can_access_mcp&#39; function in versions 2.8.0 to 2.8.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to have full access to the MCP and run various commands like &#39;wp_create_user&#39;, &#39;wp_update_user&#39; and &#39;wp_update_option&#39;, which can be used for privilege escalation, and &#39;wp_update_post&#39;, &#39;wp_delete_post&#39;, &#39;wp_update_comment&#39; and &#39;wp_delete_comment&#39;, which can be used to edit and delete posts and comments.</p> <p><strong>Affected:</strong> tigroumeow AI Engine</p> <p>The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the &#39;Meow_MWAI_Labs_MCP::can_access_mcp&#39; function in versions 2.8.0 to 2.8.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to have full access to the MCP and run various commands like &#39;wp_create_user&#39;, &#39;wp_update_user&#39; and &#39;wp_update_option&#39;, which can be used for privilege escalation, and &#39;wp_update_post&#39;, &#39;wp_delete_post&#39;, &#39;wp_update_comment&#39; and &#39;wp_delete_comment&#39;, which can be used to edit and delete posts and comments.</p> https://cve.radiocsirt.org/vuln/cve-2025-5071