Cascadia Web Services

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cascadia Web Services records in CISA KEV

No Cascadia Web Services vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-12638 CVE-2026-15015 · GHSA-8g44-6rrm-mf2w

MountDev AI MCP Connector for WordPress <= 1.6.1 - Unauthenticated Privilege Escalation via OAuth Authorization Endpoint

MEDIUM 54

The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02647 Published 2026-07-23 No fix listed CWE-862

TI-2026-58577 CVE-2026-85306 · GHSA-vfr3-w6gw-h5gr

WordPress MountDev AI MCP Connector for WordPress plugin <= 1.6.5 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Cascadia Web Services MountDev AI MCP Connector for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00326 Published 2026-09-03 No fix listed CWE-862

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0