VULNERABILITY INTELLIGENCE

CVE-2026-85306

CVSS score6.5 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-09-03
Last modified2026-09-04
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

Missing Authorization vulnerability in Cascadia Web Services MountDev AI MCP Connector for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MountDev AI MCP Connector for WordPress: from n/a through 1.6.5.

Weakness classification

  • audit@patchstack.com: CWE-862

Primary references