CVE-2026-39599

Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.

Credits

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/wds-mcp-content-manager/vulnerability/wordpress-wds-mcp-content-manager-plugin-3-10-4-broken-access-control-vulnerability?_s_id=cve