CVE-2026-39599

wallstrdev WDS MCP Content Manager

Published 6 Oct 2026 · updated 6 Oct 2026 · Received

4.3 Medium · CVSS 3.1, patchstack.com

Description

Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.

References

patchstack.com/database/wordpress/plugin/wds-mcp-content-manager/vulnerability/wordpress-wds-mcp-content-manager-plugin-3-10-4-broken-access-control-vulnerability?_s_id=cve