https://vulnerability.circl.lu/sightings/feed 2026-07-24T12:12:11.612599+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7bf52acd-57c0-4541-a81b-ffb39e6a7c56/export 2026-07-24T12:12:11.632147+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7bf52acd-57c0-4541-a81b-ffb39e6a7c56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15015", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrcymm7z5k2v", "content": "CVE-2026-15015 - mountdev ai mcp connector for wordpress\nThe MountDev AI MCP Connector for WordPress plugin is vulnerable to unauthorized access. This means that attackers can take control of the plugin\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cascadiawebservices #CVE #infosec", "creation_timestamp": "2026-07-23T13:58:05.648875Z"} 2026-07-23T13:58:05.648875+00:00 https://vulnerability.circl.lu/sighting/4d40fd8b-dd85-4988-a14a-e6edbb81aa27/export 2026-07-24T12:12:11.634451+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4d40fd8b-dd85-4988-a14a-e6edbb81aa27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15015", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrcmzeb6it2i", "content": "CRITICAL: MountDev AI MCP Connector for WordPress \u22641.6.1 lets unauth attackers steal admin OAuth tokens. Restrict endpoints & monitor for suspicious clients. Patch ASAP. https://radar.offseq.com/threat/cve-2026-15015-cwe-862-missing-authorization-in-cascadiawebservices-mountdev-ai-mcp-connector-f...", "creation_timestamp": "2026-07-23T10:30:29.806595Z"} 2026-07-23T10:30:29.806595+00:00 https://vulnerability.circl.lu/sighting/97514a35-7676-46ed-9be5-3a82dc7648a8/export 2026-07-24T12:12:11.634661+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "97514a35-7676-46ed-9be5-3a82dc7648a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15015", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116968824938837459", "content": "CVE-2026-15015 | CRITICAL: MountDev AI MCP Connector for WordPress \u22641.6.1 lets unauthenticated attackers get admin OAuth tokens via missing authorization. Act to restrict endpoints & monitor for rogue clients. https://radar.offseq.com/threat/cve-2026-15015-cwe-862-missing-authorization-in-cascadiawebservices-mountdev-ai-mcp-connector-for-7f3334e71801a208 #OffSeq #WordPress #Infosec #OAuth #CVE202615015", "creation_timestamp": "2026-07-23T10:30:27.620360Z"} 2026-07-23T10:30:27.620360+00:00