Iatoai vulnerabilities
Published CVEs affecting Iatoai products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-32582
Medium · 6.5
CWE-862 Oct 6, 2026
WordPress IATO MCP plugin <= 1.12.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a through 1.12.0.