The MCP Server for WordPress plugin before version 1.8.2 does not perform an object‑level authorization check on its workflows/run REST route. This flaw allows a user with the Contributor role to request that route and obtain the title and publication status of any post, page, or custom post type, including content that is private, draft, pending, or scheduled. The result is an information disclosure that can help attackers map site content and potentially plan further attacks.

Any WordPress installation that has the MCP Server for WordPress plugin installed prior to version 1.8.2 is affected. The vulnerability applies regardless of other plugins or theme configurations, as the flaw resides solely within the plugin’s REST endpoint.

The exploitation requires an authenticated Contributor (or higher) role to call vulnerable endpoint. The EPSS score is < 1% and the CVSS score is 2.7, indicating a very low probability of exploitation and a low severity impact. The vulnerability is not listed in the CISA KEV catalog, meaning there is no evidence of widespread exploitation. Because the flaw allows disclosure only of titles and publication status—not the full content—the overall risk of information leakage remains low, particularly for sites that expose private or draft content.