ByteCore Stack

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

ByteCore Stack records in CISA KEV

No ByteCore Stack vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-16064 CVE-2026-19807 · GHSA-qwvr-5fhh-47xh

ByteCoreStack <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via wp_update_user_meta MCP Tool

MEDIUM 40

The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3 This is due to the `wp_update_user_meta` MCP tool in `execute_tool` ga…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00372 Published 2026-10-01 No fix listed CWE-269

TI-2026-65581 CVE-2026-103068 · GHSA-456m-pwjf-fmqf

WordPress ByteCoreStack – MCP Connector for AI Tools plugin <= 1.2.2 - Privilege Escalation vulnerability

LOW 39

Subscriber Privilege Escalation in ByteCoreStack – MCP Connector for AI Tools <= 1.2.2 versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00225 Published 2026-10-01 No fix listed CWE-266

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0