Airano MCP Bridge

Airano MCP Bridge has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of October 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Airano MCP Bridge has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Ananda Dhakal. Airano MCP Bridge is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.7.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Airano MCP Bridge vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2026-32585

Airano MCP Bridge <= 2.11.0 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Airano MCP Bridge banner
Latestv2.11.0

Airano MCP Bridge

airano

Author

airano

0.0(0)
0/100
Last Updated
2026-06-04 (5mo ago)
Active Installs
70+
Downloads
1,347
Requires WP
5.6+
Requires PHP
7.4+
Tested up to
WP 7.0.7
Created
2026-05-10 (5mo ago)

Airano MCP Bridge is the official companion plugin for MCP Hub (source) — the AI-native management hub for WordPress, WooCommerce, and self-hosted services. It extends the WordPress REST API with dedicated routes that AI agents (Claude, ChatGPT, Cursor, VS Code Copilot) and the MCP Hub server rely on: SEO meta routes — read and write Rank Math SEO and Yoast SEO metadata for posts, pages, and WooCommerce products. Media upload helper routes — accept raw-binary uploads via php://input, which bypasses the upload_max_filesize PHP limit (still bounded by post_max_size). Unlocks reliable hero-image and large-asset uploads for AI-agent workflows. Capability probe — reports the effective PHP + WordPress upload limits so MCP Hub can pick the right upload path automatically. Features: Rank Math SEO Support — Full access to all Rank Math meta fields Yoast SEO Support — Full access to all Yoast SEO meta fields WooCommerce Compatible — Works with product post types MCP Hub media pipeline — bypasses upload_max_filesize for AI-agent uploads Secure — Requires WordPress Application Password + capability checks on every route Auto-Detection — Automatically detects active SEO plugin and advertises capabilities Zero Configuration — Works out of the box after activation REST API Endpoints: SEO meta (namespace airano-mcp-bridge/v1) GET/POST /wp-json/airano-mcp-bridge/v1/posts/{id}/seo — Post SEO data GET/POST /wp-json/airano-mcp-bridge/v1/pages/{id}/seo — Page SEO data GET/POST /wp-json/airano-mcp-bridge/v1/products/{id}/seo — Product SEO data (WooCommerce) GET /wp-json/airano-mcp-bridge/v1/status — Plugin status + active SEO plugins MCP Bridge helpers (namespace airano-mcp/v1, added in 2.0.0) GET /wp-json/airano-mcp/v1/upload-limits — Effective PHP + WP upload limits POST /wp-json/airano-mcp/v1/upload-chunk — Raw-body media upload (bypasses upload_max_filesize) GET /wp-json/airano-mcp/v1/capabilities — Effective capabilities + feature flags + available routes (added in 2.1.0) POST /wp-json/airano-mcp/v1/bulk-meta — Batch post/product meta writes in a single HTTP round-trip (added in 2.2.0) GET /wp-json/airano-mcp/v1/export — Structured JSON export: posts, pages, products + media + terms + meta, with post_type/status/since/limit/offset paging (added in 2.3.0) POST /wp-json/airano-mcp/v1/cache-purge — Auto-detects active cache plugins (LiteSpeed, WP Rocket, W3TC, Super Cache, Fastest Cache, SG Optimizer) and invokes their purge API; always flushes object cache (added in 2.4.0) POST /wp-json/airano-mcp/v1/transient-flush — Native transient cleanup with scope=expired/all/pattern (glob); optional site-transient handling on multisite (added in 2.5.0) GET /wp-json/airano-mcp/v1/site-health — Unified site-health snapshot: PHP/MySQL/WP versions, extensions, disk free, active plugins + theme, writability checks (added in 2.6.0) GET|POST|DELETE /wp-json/airano-mcp/v1/audit-hook — Configure + query a webhook that forwards WordPress action events to MCP Hub (HMAC-SHA256 signed, non-blocking) (added in 2.7.0) POST /wp-json/airano-mcp/v1/regenerate-thumbnails — Regenerate attachment sub-sizes via wp_generate_attachment_metadata for a list of IDs or in paged batch mode (added in 2.8.0) POST /wp-json/airano-mcp/v1/upload-and-attach — Raw-body upload + metadata + attach-to-post + set-featured in a single REST call (added in 2.9.0). Query params: attach_to_post, set_featured, title, alt_text, caption, description. Permission: upload_files + edit_post on the target post. POST /wp-json/airano-mcp/v1/opcache-reset — Reset PHP OPcache after a theme/plugin deploy (added in 2.11.0). Permission: manage_options. GET /wp-json/airano-mcp/v1/transients — Read-only inventory of transient keys + expirations; values intentionally never returned (added in 2.11.0). Capped at 500 per call. Permission: manage_options. POST /wp-json/airano-mcp/v1/term-update — Mutate a taxonomy term via wp_update_term (added in 2.11.0). Accepts taxonomy (canonical name or REST base), term_id, and any of name/slug/description/parent. Permission: the taxonomy’s own edit_terms capability, enforced at the route gate. POST /wp-json/airano-mcp/v1/cache-purge — As of 2.11.0 accepts an optional scope body parameter (all / page / object, default all). Designed for MCP Hub — the AI-native management hub for WordPress and self-hosted services. Try the live platform · Source on GitHub.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C