CVE-2026-15015

MountDev AI MCP Connector for WordPress <= 1.6.1 - Unauthenticated Privilege Escalation via OAuth Authorization Endpoint

No known exploitation. EPSS puts it in the 85th percentile. No fix published yet.

CVSS 3.19.8Critical EPSS percentile85th2.6% chance in 30 days CISA KEVNot listedNo confirmed exploitation
No public exploit known FixNone yetNo fix or workaround published

Published 2026-07-23Updated 2026-07-23Sources: CVE.org, NVD

NVD CVE.org

What to do

No fixed build or workaround is published yet. Limit exposure and watch for a patch.

cascadiawebservices MountDev AI MCP Connector for WordPressAffected: ≤ 1.6.1Upgrade to: after 1.6.1Stated by: CVE record

Versions as the sources state them. Full version matrix after sign-in

Steps

Written by AI from the record

Check whether MountDev AI MCP Connector for WordPress is installed and its version is 1.6.1 or older.
If it is, immediately disable/remove the plugin from your WordPress site until a fix is available.
Contact your plugin vendor/host to request the patched version for MountDev AI MCP Connector for WordPress and to confirm whether any interim mitigation exists.
Review WordPress admin users, recent changes, and any OAuth/client activity in your WordPress configuration/logs since installation/last update.

May need vendor or contractor work

Check it yourselfA free Nuclei check exists for this CVE. Run it against your hosts.Is your organisation exposed?Discuss checks for your systems with a specialist. Scope is agreed before testing.

What it is

From the CVE record

The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to obtain an administrator-bound OAuth Bearer token via a self-registered client, granting full administrator-equivalent access to the plugin's MCP tool surface and all exposed WordPress content, users, and options. This is exploitable by combining the publicly accessible Dynamic Client Registration endpoint, which allows unauthenticated callers to register arbitrary OAuth clients with an attacker-controlled redirect_uri, with the unprotected authorization endpoint to complete the full OAuth flow without any administrator interaction.

In plain language

Written by AI from the record

If you run MountDev AI MCP Connector for WordPress version 1.6.1 or older, attackers can get administrator-level access without logging in, letting them take over the plugin and view/change your WordPress content—this is a serious risk that you should act on now.

CVE-2026-15015 is an authorization-check bypass in MountDev AI MCP Connector for WordPress (≤ 1.6.1) that allows unauthenticated attackers to register an arbitrary OAuth client and obtain an administrator-equivalent OAuth Bearer token via the public Dynamic Client Registration and authorization endpoints, resulting in full plugin control and access to WordPress data and settings.

If you're affected

Full WordPress takeover
Site content and user changes
Exposure of WordPress data
Operational disruption

What is it

This vulnerability lets a stranger access your WordPress “admin” abilities through the plugin’s OAuth connections—without having to log in to your site. Think of it like leaving the front door key-making machine unlocked: anyone can create their own “key” and then open the admin-only rooms. Once they have that key, they can read and change your site’s content, users, and settings.

Who is affected

This matters if your WordPress site has the “MountDev AI MCP Connector for WordPress” plugin installed at version 1.6.1 or older. The risk is reachable remotely through public endpoints, and it does not require any login or action from you. End result: only sites with the affected plugin version installed are at risk.

How urgent is it

Treat this as urgent because the weakness is reachable without authentication and can grant administrator-equivalent access, which attackers can use immediately for takeover. There is no fix/patch information available yet, so disabling/removing the plugin (or blocking access to it) is the fastest way to reduce risk while you wait for an official update.

What to do — in detail

Confirm exposure (required).
- Log into WordPress as an administrator.
- Go to the Plugins screen and locate “MountDev AI MCP Connector for WordPress”.
- Record the installed version.
- If the version is 1.6.1 or older, you are considered vulnerable based on the available findings.
Immediate mitigation (until a fix is available).
- Disable the plugin.
- If disabling breaks critical site functionality, consider removing it temporarily and re-enabling only after a vendor-confirmed fixed version is available.
- If your hosting provides a way to block public access to the plugin’s endpoints, ask your host/IT team to implement an access restriction as a temporary containment measure.
Vendor/host coordination.
- Contact the plugin vendor (or your WordPress maintenance provider) and ask for:
  - The patched release version for MountDev AI MCP Connector for WordPress.
  - Any interim workaround they recommend if you cannot remove the plugin immediately.
  - Whether you should rotate WordPress credentials after incident potential.
Check for signs of misuse.
- Review WordPress admin users: look for newly created users, suspicious roles, or unexpected password changes.
- Review recent configuration changes: site settings, plugin configuration, and any changes related to OAuth/connected clients.
- Check server/access logs for unusual traffic to public OAuth-related endpoints associated with the plugin during the period it has been installed.
After remediation.
- Keep the plugin disabled until you can install the vendor-provided fixed version.
- Re-check the plugin version in the Plugins screen after any update.

Note: The provided findings state that no fix/patch information is available at this time, so the goal is to reduce exposure immediately while you obtain vendor guidance.

Technical context

Severity is critical in impact because attackers can obtain administrator-equivalent access without authentication. The weakness is an authorization bypass (CWE-862) in MountDev AI MCP Connector for WordPress OAuth endpoints. Per the findings, exploitation does not require any victim login or user interaction.

Mechanism (as described in the findings): an unauthenticated attacker can use a public Dynamic Client Registration endpoint to register an attacker-controlled OAuth client, then use an unprotected authorization endpoint to complete the OAuth flow and obtain an administrator-bound OAuth Bearer token. With this token, the attacker gains full control over the plugin’s MCP tool surface and access to exposed WordPress content, users, and settings.

Exploitation status: no public exploit code is on record, and the vulnerability is not listed in CISA KEV. Despite this, the issue is treated as actively serious due to the direct path to administrator-level access and the exposed network reachability in default configurations for MountDev AI MCP Connector for WordPress versions up to and including 1.6.1.

EPSS/patch card details: not provided in the findings you supplied; also, no fix/patch information is available.

This is a general assessment based on public vulnerability data. It does not account for your specific infrastructure — when in doubt, consult a security specialist.

Exploitation

Where each signal puts this CVE on the scale from published to confirmed exploited.

EPSS85th

CISA KEV

Not in the catalog. CISA has not confirmed exploitation.

Public exploits

No public exploit or proof of concept found in the sources we track.

EPSS

2.6% chance of exploitation activity in the next 30 days, which ranks it in the 85th percentile of scored CVEs.

Exploit Prediction Scoring System, FIRST.org. A probability, not a confirmation.

Lifecycle

6 events over 90 days, from the signal feeds we watch.

2026-10-21Nuclei check added
2026-07-23Publishedweakness classified, att&ck mapped, record updated, record updated

Affected products

cascadiawebservices
- MountDev AI MCP Connector for WordPress

Technical detail

CVSS 3.1 vector

Open in the CVSS calculator

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Scored 9.8 by NVD.

How it is reached

Attack Vector NetworkExploitable remotely over the network without any special conditions
Attack Complexity LowNo special conditions — the attack can be reliably reproduced
Privileges Required NoneNo authentication required — anyone can exploit this
User Interaction NoneNo user interaction needed — fully automated exploitation

Scope

Scope UnchangedImpact is limited to the vulnerable component itself

Impact if exploited

Confidentiality HighTotal information disclosure — all data in the component is compromised
Integrity HighTotal loss of integrity — attacker can modify any data in the component
Availability HighTotal denial of service — the component is completely unavailable