Bytecorestack 8211 Mcp Connector For Ai Tools
Monthly
Authenticated subscriber-level attackers can escalate privileges on WordPress sites running ByteCoreStack - MCP Connector for AI Tools versions up to 1.2.2 due to an incorrect privilege assignment (CWE-266). The vulnerability is network-exploitable with low complexity and requires only a subscriber account (CVSS PR:L), with no user interaction, resulting in high confidentiality, integrity, and availability impact (CVSS 8.8). No public exploit code or confirmed active exploitation has been identified at time of analysis.
Authenticated subscriber-level attackers can escalate privileges on WordPress sites running ByteCoreStack - MCP Connector for AI Tools versions up to 1.2.2 due to an incorrect privilege assignment (CWE-266). The vulnerability is network-exploitable with low complexity and requires only a subscriber account (CVSS PR:L), with no user interaction, resulting in high confidentiality, integrity, and availability impact (CVSS 8.8). No public exploit code or confirmed active exploitation has been identified at time of analysis.