https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 24 Jul 2026 12:12:11 +0000 https://vulnerability.circl.lu/sighting/7bf52acd-57c0-4541-a81b-ffb39e6a7c56/export {"uuid": "7bf52acd-57c0-4541-a81b-ffb39e6a7c56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15015", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrcymm7z5k2v", "content": "CVE-2026-15015 - mountdev ai mcp connector for wordpress\nThe MountDev AI MCP Connector for WordPress plugin is vulnerable to unauthorized access. This means that attackers can take control of the plugin\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cascadiawebservices #CVE #infosec", "creation_timestamp": "2026-07-23T13:58:05.648875Z"} {"uuid": "7bf52acd-57c0-4541-a81b-ffb39e6a7c56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15015", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrcymm7z5k2v", "content": "CVE-2026-15015 - mountdev ai mcp connector for wordpress\nThe MountDev AI MCP Connector for WordPress plugin is vulnerable to unauthorized access. This means that attackers can take control of the plugin\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cascadiawebservices #CVE #infosec", "creation_timestamp": "2026-07-23T13:58:05.648875Z"} https://vulnerability.circl.lu/sighting/7bf52acd-57c0-4541-a81b-ffb39e6a7c56/export Thu, 23 Jul 2026 13:58:05 +0000 https://vulnerability.circl.lu/sighting/4d40fd8b-dd85-4988-a14a-e6edbb81aa27/export {"uuid": "4d40fd8b-dd85-4988-a14a-e6edbb81aa27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15015", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrcmzeb6it2i", "content": "CRITICAL: MountDev AI MCP Connector for WordPress \u22641.6.1 lets unauth attackers steal admin OAuth tokens. Restrict endpoints & monitor for suspicious clients. Patch ASAP. https://radar.offseq.com/threat/cve-2026-15015-cwe-862-missing-authorization-in-cascadiawebservices-mountdev-ai-mcp-connector-f...", "creation_timestamp": "2026-07-23T10:30:29.806595Z"} {"uuid": "4d40fd8b-dd85-4988-a14a-e6edbb81aa27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15015", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrcmzeb6it2i", "content": "CRITICAL: MountDev AI MCP Connector for WordPress \u22641.6.1 lets unauth attackers steal admin OAuth tokens. Restrict endpoints & monitor for suspicious clients. Patch ASAP. https://radar.offseq.com/threat/cve-2026-15015-cwe-862-missing-authorization-in-cascadiawebservices-mountdev-ai-mcp-connector-f...", "creation_timestamp": "2026-07-23T10:30:29.806595Z"} https://vulnerability.circl.lu/sighting/4d40fd8b-dd85-4988-a14a-e6edbb81aa27/export Thu, 23 Jul 2026 10:30:29 +0000 https://vulnerability.circl.lu/sighting/97514a35-7676-46ed-9be5-3a82dc7648a8/export {"uuid": "97514a35-7676-46ed-9be5-3a82dc7648a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15015", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116968824938837459", "content": "CVE-2026-15015 | CRITICAL: MountDev AI MCP Connector for WordPress \u22641.6.1 lets unauthenticated attackers get admin OAuth tokens via missing authorization. Act to restrict endpoints & monitor for rogue clients. https://radar.offseq.com/threat/cve-2026-15015-cwe-862-missing-authorization-in-cascadiawebservices-mountdev-ai-mcp-connector-for-7f3334e71801a208 #OffSeq #WordPress #Infosec #OAuth #CVE202615015", "creation_timestamp": "2026-07-23T10:30:27.620360Z"} {"uuid": "97514a35-7676-46ed-9be5-3a82dc7648a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15015", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116968824938837459", "content": "CVE-2026-15015 | CRITICAL: MountDev AI MCP Connector for WordPress \u22641.6.1 lets unauthenticated attackers get admin OAuth tokens via missing authorization. Act to restrict endpoints & monitor for rogue clients. https://radar.offseq.com/threat/cve-2026-15015-cwe-862-missing-authorization-in-cascadiawebservices-mountdev-ai-mcp-connector-for-7f3334e71801a208 #OffSeq #WordPress #Infosec #OAuth #CVE202615015", "creation_timestamp": "2026-07-23T10:30:27.620360Z"} https://vulnerability.circl.lu/sighting/97514a35-7676-46ed-9be5-3a82dc7648a8/export Thu, 23 Jul 2026 10:30:27 +0000