WEBO MCP EUVD-2026-89906

Requires an authenticated WordPress account with at least the 'Author' role on a site running the WEBO MCP plugin version 3.0.18 or earlier; per the CVSS vector this maps to PR:H (though the 'Author' role label suggests the practical bar may be lower, PR:L). No user interaction is needed (UI:N) and the vector is network/remote (AV:N, AC:L). Exploitation is limited by the need for a valid content-creator account and by the plugin's niche deployment; impact is confined to availability (file deletion) with a scope change affecting resources outside the plugin, and no confidentiality or integrity impact.

CVSS 3.1 base score is 6.8 (Medium) with vector AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H, describing a network-reachable, low-complexity arbitrary file deletion that requires an authenticated account and impacts only availability (with a scope change). No EPSS score, KEV listing, POC, or SSVC decision data was supplied, so there is no signal of active or imminent exploitation - exploitation status is 'no public exploit identified at time of analysis.' The realistic priority is LOW-to-MEDIUM: although the flaw is destructive (deleting files such as wp-config.php can take a site offline or, combined with WordPress's install-recovery behavior, enable takeover), it requires an existing privileged/content-author account on the target and yields no confidentiality or integrity impact per the vendor vector. One CONFLICT worth flagging: the description labels the required privilege as 'Author,' a mid-level WordPress content-creator role that is normally mapped to PR:L, yet Patchstack's vector uses PR:H - verify the true minimum role with the vendor, because if the real requirement is Author (PR:L) the effective severity is meaningfully higher than the published 6.8.

An attacker who has obtained or registered an Author-level WordPress account on a site running WEBO MCP <= 3.0.18 sends a crafted request to a plugin endpoint, supplying a path-traversal sequence (e.g. ../../wp-config.php) as the file-target parameter. The plugin deletes the referenced file without restricting it to its own directory, removing critical WordPress or server files and breaking the site (a scope change beyond the plugin's own resources). No public POC is currently identified, and exploitation requires the authenticated Author privilege noted in the CVSS vector.