EUVD-2026-92112
GHSA-whv8-gjx4-3v4q
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate as low-privileged WordPress user
-
ExploitRequest vulnerable MCP plugin endpoint
-
ExecutionReceive response with embedded sensitive data
-
ImpactHarvest disclosed information
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V14 - Data Protection Outbound data filtering
|
| Exploitation Conditions | Requires a valid authenticated WordPress account with at least low-level privileges (CVSS PR:L) on a site running the Mindio Magic MCP plugin version up to and including 0.5.6; exploitation is network-reachable with low complexity and no user interaction. The description does not name a specific non-default feature toggle, so the limiting factor is primarily the authentication requirement - fully unauthenticated visitors cannot exploit it. Impact is limited to disclosure of embedded sensitive data (confidentiality only); no integrity or availability impact applies, which constrains the practical severity to information leakage to already-authenticated low-privilege users. |
| Impact | This is a moderate-severity information-disclosure issue (CWE-201) with a self-consistent set of signals that collectively point to LOW real-world urgency. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N, base 4.3) indicates a network-reachable flaw that is easy to trigger but requires at least low-level authenticated privileges (PR:L) and yields only limited confidentiality impact with no integrity or availability effect. There is no CISA KEV listing and no public exploit identified at time of analysis, and no EPSS score was provided in the input, so there is no evidence of active or imminent exploitation. The signals do not conflict: a low CVSS, an authentication requirement, and the absence of KEV/POC all align toward a low-priority, patch-in-routine-cycle item rather than an emergency. The main residual risk is for multi-user WordPress installations where a low-privileged account could read embedded sensitive data it should not see. Note: EPSS data is MISSING from the input and cannot be used to refine likelihood. |
| Exploit ScenarioDerived | A user holding a low-privileged authenticated account (e.g., subscriber/contributor) on a WordPress site running the Mindio Magic MCP plugin sends a request to a plugin endpoint that returns responses containing embedded sensitive data not intended for that privilege level. Because attack complexity is low and no user interaction is needed, the actor simply reads the exposed information from the response. No public proof-of-concept exploit code was identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 04, 2026
Sensitive information embedded in outbound responses from the Mindio Magic MCP WordPress plugin (versions through 0.5.6) can be retrieved by a remote, authenticated attacker holding only low-level privileges on the affected site (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). The flaw is a CWE-201 'Insertion of Sensitive Information Into Sent Data' condition, meaning the plugin places data into responses it transmits rather than leaking it through a separate storage or traversal bug. Impact is limited to confidentiality (information disclosure) with no integrity or availability effect, and there is no public exploit identified at time of analysis and no CISA KEV listing, so real-world urgency is low-to-moderate. The CVSS base score of 4.3 reflects that an attacker must already possess a valid WordPress account on the target site before the disclosure is reachable.
RemediationAI
No vendor-released patch or fixed version is identified in the available data, so the first action is to check the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/mindio-magic-mcp/vulnerability/wordpress-mindio-magic-mcp-plugin-0-5-6-sensitive-data-exposure-vulnerability?_s_id=cve and the plugin's WordPress.org update channel for an updated release above 0.5.6, then upgrade as soon as one exists. If the plugin is not actively needed, deactivating and removing it eliminates the exposure entirely - the only reliable trade-off-free mitigation given that the defect is in the plugin's own response payloads. If it must stay enabled, restrict access so that the plugin's endpoints and any associated MCP/JSON-RPC routes (for example the relevant /wp-json/ paths) are reachable only from trusted IP ranges or internal networks via web-server or WAF rules, accepting that this breaks legitimate external integrations; and tighten WordPress role assignments so that no unnecessary accounts hold even the low-level privileges (CVSS PR:L) required to reach the disclosure. Because the vulnerability exposes embedded secrets in outbound data, assume that any API keys, tokens, or credentials referenced in the plugin's configuration may already have leaked to any user who had authenticated access - rotate those secrets and audit logs for unexpected requests to the plugin's endpoints. Note also that CVSS PR:L means this is not remotely exploitable by anonymous visitors, so blocking unauthenticated access alone is insufficient; the role-reduction and endpoint-restriction steps must be applied to logged-in accounts as well.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
CWE-201 describes the class of defects in which an application writes sensitive values - tokens, keys, credentials, configuration secrets, or other private fields - into data that is then transmitted to a client, instead of filtering or redacting them. Here the affected component is the WordPress plugin Mindio Magic MCP, published by farvisun, which is associated with MCP (Model Context Protocol) tooling and therefore typically exposes server-side functions and contextual data back to a calling client. The vulnerability lives in the response-construction path: rather than a path-traversal, deserialization, or injection primitive, the plugin simply includes sensitive material in the payloads it returns. The supplied CPE, cpe:2.3:a:farvisun:mindio_magic_mcp:*:*:*:*:*:*:*:*, is wildcard-versioned, meaning the authoritative version boundary comes from the vendor/description data (all versions up to and including 0.5.6) rather than from CPE enumeration. Because the transport is the plugin's own response channel over HTTP(S), the attack surface is network-reachable (AV:N) with low attack complexity (AC:L), but it is gated behind an authenticated session with at least low privileges (PR:L) and requires no victim interaction (UI:N).
Know when Mindio Magic Mcp gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Network-reachable (AV:N) and easy to trigger (AC:L) but needs a low-privileged authenticated account (PR:L); limited data exposure gives C:L with no integrity or availability impact.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
DescriptionCVE.org
Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Retrieve Embedded Sensitive Data.This issue affects Mindio Magic MCP: from n/a through 0.5.6.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Exploit-DB