iatoai CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM iatoai CVE published 2026-10-06

CVE-2026-32582

PatchSiren debrief for CVE-2026-32582: The WordPress IATO MCP plugin version <= 1.12.0 has a Broken Access Control vulnerability. This issue allows exploiting incorrectly configured access control security levels. WordPress administrators and users of the IATO MCP plugin should assess their exposure and verify proper configuration of access control security levels. The CVE record and source item provide d [truncated]