The MCP Server for WordPress plugin versions earlier than 1.8.2 fails to enforce an ownership or capability check on its workflow creation, update, and deletion REST endpoints. This flaw allows any user assigned the Contributor role to modify, delete, and create site‑wide workflow configurations, including configurations originally set by administrators. The result is that an attacker with Contributor privileges can change how the site behaves.

Any WordPress site running the MCP Server for WordPress plugin prior to version 1.8.2 is affected, regardless of additional security plugins. The vulnerability is confined to the plugin itself and does not depend on the WordPress core version.

The vulnerability requires only that a user be assigned the Contributor role. No additional credentials are required to send crafted REST requests to the endpoints, as implied by the description. Since the EPSS score is < 1% and KEV does not list the vulnerability, the likelihood of exploitation is very low. The CVSS score of 2.7 indicates low severity, which limits the potential impact, but the ability to modify or delete site‑wide workflow configurations still represents a tangible risk to site behavior.