EUVD-2026-91659
GHSA-f55q-6qxf-8569
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain low-privilege WordPress account
-
ExploitSend request to unprotected plugin endpoint
-
ExecutionBypass missing authorization check
-
ImpactModify restricted data or configuration
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization checks on every request
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires an authenticated low-privilege account on a WordPress site running Airano MCP Bridge version 2.11.0 or earlier (PR:L); the plugin's MCP bridge action lacks a proper authorization/capability check, allowing that account to perform operations reserved for higher privileges. Limiting factors: the attacker must already hold valid credentials (not fully unauthenticated), so sites that disable open user registration and restrict account creation substantially reduce exposure; no user interaction is needed and the attack is remote over the network. Only integrity is affected - there is no direct confidentiality or availability impact per the CVSS vector. |
| Impact | The CVSS 3.1 vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N, base 6.5) indicates a network-exploitable, low-complexity flaw that requires some level of authentication (PR:L) and no user interaction, yielding high integrity impact but no confidentiality or availability impact. This profile fits a CWE-862 Missing Authorization weakness where an authenticated low-privilege user (typical for WordPress, a subscriber or any logged-in account) can invoke functionality they should not be allowed to, modifying state. No EPSS score was provided in the input, so exploitation probability cannot be quantified here. The vulnerability is NOT listed in CISA KEV and no public exploit code is referenced - the only source is the Patchstack advisory. Overall this is a moderate-priority issue rather than an emergency: the PR:L requirement and lack of confidentiality/availability impact temper the network attack vector, and there is no evidence of active exploitation. Real-world urgency depends on how many sites run this plugin and whether low-privilege registration is open. MISSING DATA: EPSS, KEV, POC status, and SSVC decision points were all absent from the input and could not be factored in. |
| Exploit ScenarioDerived | An attacker registers or obtains a low-privilege authenticated account on a WordPress site running the Airano MCP Bridge plugin (<= 2.11.0). Because the plugin fails to enforce an authorization check (CWE-862), the attacker sends a request to a privileged plugin action and alters data or configuration they should not control, achieving the high integrity impact reflected in the CVSS vector. No public exploit code was identified in the provided data, and exploitation requires a valid low-privilege session. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 02, 2026
Airano MCP Bridge, a WordPress plugin, ships an MCP bridge action that performs privileged operations without validating the caller's capabilities, so any authenticated low-privilege user (for example a Subscriber) can invoke it and modify data that should be reserved for administrators. The flaw affects all versions up to and including 2.11.0, is remotely reachable over the network with low attack complexity and no user interaction, and is rated CVSS 3.1 base 6.5 with high integrity impact but no confidentiality or availability impact. No public exploit code and no confirmed active exploitation were identified at time of analysis, and exploitation is gated on the attacker already holding a valid account on the target site.
RemediationAI
No vendor-released patch version was specified in the available data, so treat this as 'No vendor-released patch identified at time of analysis' and check the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/airano-mcp-bridge/vulnerability/wordpress-airano-mcp-bridge-plugin-2-11-0-broken-access-control-vulnerability?_s_id=cve for a fixed build before deciding, then upgrade to the earliest patched release once published. Until a fix is confirmed, the most effective control is to deactivate the Airano MCP Bridge plugin entirely; if that is not operationally acceptable, block or restrict access to the plugin's MCP bridge endpoint at the web server, reverse proxy, or WAF so only trusted administrative networks or accounts can reach it, accepting that this breaks third-party MCP client integrations. Reduce the attack surface by disabling open user registration and auditing existing accounts so that no untrusted low-privilege users exist, since the flaw requires a valid authenticated account (PR:L) - this is a compensating measure, not a fix, because any legitimate low-privilege user still qualifies as an attacker. Additionally, monitor WordPress audit logs for unexpected content or configuration changes made by Subscriber- or Contributor-level accounts, and apply strict capability review to any other MCP-exposing plugins on the same site.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
This is a missing authorization vulnerability (CWE-862) in a WordPress plugin's REST/AJAX-facing MCP bridge endpoint. The bridge action is registered and callable over the network but does not perform a current_user_can() capability check (or equivalent nonce/role validation) before executing, meaning the plugin relies on authentication alone rather than authorization to gate a privileged operation. In WordPress terms, any request carrying a valid session or application credential - including a Subscriber-level account - passes the plugin's implicit assumption that the caller is trusted, and the operation proceeds with the site's privileges rather than the user's. The affected component is the MCP bridge, which exposes WordPress functionality to external MCP (Model Context Protocol) clients; per the CPE cpe:2.3:a:airano:airano_mcp_bridge:*:*:*:*:*:*:*:* the entire plugin line through 2.11.0 is in scope. The CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N confirms the operation is network-reachable and low-complexity, requires a low-privileged authenticated principal, needs no victim interaction, and yields high integrity impact only within the plugin's own security scope.
Know when Airano Mcp Bridge gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Network-reachable WordPress endpoint (AV:N/AC:L) requiring a valid low-privilege account (PR:L); missing authorization lets the user alter state (I:H) with no confidentiality or availability impact.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
DescriptionCVE.org
Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Airano MCP Bridge: from n/a through 2.11.0.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Exploit-DB