Executive brief
The MCP Server for WordPress plugin allows users with the Contributor role to access sensitive post information they should not be able to view. An attacker with basic WordPress permissions can retrieve titles and publication status of private, draft, pending, and scheduled posts or pages belonging to other users, leading to unauthorized disclosure of unpublished content.
Technical details
The plugin fails to perform object-level authorization checks on a workflows/run REST route, allowing Contributor-level users to enumerate and retrieve sensitive metadata about posts beyond their authorization scope. The vulnerability requires authenticated network access with Contributor role privileges; an authenticated attacker can craft REST requests to disclose post titles and status across the entire site, including private and unpublished content.
Affected products
- Ironpress MCP Server for WordPress before 1.8.2
Timeline
- 2026-09-24: disclosed
- 2026-09-24: patched: Fixed in version 1.8.2