@offseq.bsky.social on Bluesky

Post

OffSequence

offseq.bsky.social

did:plc:t5t6qep2vfipbi7f54demwev

CRITICAL: MountDev AI MCP Connector for WordPress ≤1.6.1 lets unauth attackers steal admin OAuth tokens. Restrict endpoints & monitor for suspicious clients. Patch ASAP. https://radar.offseq.com/threat/cve-2026-15015-cwe-862-missing-authorization-in-cascadiawebservices-mountdev-ai-mcp-connector-f... https://radar.offseq.com/threat/cve-2026-15015-cwe-862-missing-authorization-in-cascadiawebservices-mountdev-ai-mcp-connector-for-7f3334e71801a208

2026-07-23T10:30:29.163Z

Enable JavaScript to use Bluesky.

Learn more about Bluesky at bsky.social and atproto.com.