WP HealthKit's independent audit rates Smart MCP overall risk as CRITICAL with a report-card grade of D.

How many vulnerabilities does Smart MCP have?

The audit found 96 findings: 2 critical, 9 high, 50 medium severity.

Should I use Smart MCP?

Based on the latest audit (grade D, risk CRITICAL), review the 96 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

Smart MCP

v1.0.1WordPress PluginAudited 2 days ago

Turn your WordPress site into an AI workspace. Chat with your site, or connect Claude, ChatGPT and other AI clients over MCP. Free.

CRITICAL

Total Findings

Security Grade

Security Findings

Critical2

High9

Medium50

Low28

Info7

Executive Summary

Is Smart MCP secure? In WP HealthKit's independent 2026 audit, Smart MCP received an overall risk of CRITICAL and a report-card grade of D across 96 findings (2 critical, 9 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![Smart MCP security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/smarto-smart-mcp)](https://wphealthkit.com/directory/smarto-smart-mcp)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

Audit Your Plugin

Get a comprehensive security audit for your WordPress plugin or theme. Upload your zip and get results in minutes.

Start Free Audit