{"uuid": "97514a35-7676-46ed-9be5-3a82dc7648a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15015", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116968824938837459", "content": "CVE-2026-15015 | CRITICAL: MountDev AI MCP Connector for WordPress \u22641.6.1 lets unauthenticated attackers get admin OAuth tokens via missing authorization. Act to restrict endpoints & monitor for rogue clients. https://radar.offseq.com/threat/cve-2026-15015-cwe-862-missing-authorization-in-cascadiawebservices-mountdev-ai-mcp-connector-for-7f3334e71801a208 #OffSeq #WordPress #Infosec #OAuth #CVE202615015", "creation_timestamp": "2026-07-23T10:30:27.620360Z"}