Is MCP for WordPress by Kites.Dev Secure?
D
Grade D — Poor
High RiskMCP for WordPress by Kites.Dev receives a Grade D from WP HealthKit's 62-layer security audit, with 70 findings including 1 critical vulnerabilities.
Grade
D
Findings
70
Critical
1
Standards
N/A
Active Installs
N/A
Last Audited
Today
What We Found
REST endpoint open to all visitors (permission_callback returns true)CRITICAL
Missing 'Requires PHP' headerHIGH
Custom tables not cleaned up on uninstallHIGH
dbDelta() called without a version-comparison guardHIGH
dbDelta() called without a version-comparison guardHIGH
+ 65 more findings in the full report.
Frequently Asked Questions
Is MCP for WordPress by Kites.Dev safe to use?
MCP for WordPress by Kites.Dev receives a Grade D from WP HealthKit's 62-layer security audit, with 70 findings including 1 critical vulnerabilities.
How many vulnerabilities does MCP for WordPress by Kites.Dev have?
WP HealthKit's audit found 70 findings for MCP for WordPress by Kites.Dev: 1 critical, 13 high, and 36 medium severity issues.
What is MCP for WordPress by Kites.Dev's security grade?
MCP for WordPress by Kites.Dev has an overall security grade of D (Poor) based on WP HealthKit's 62-layer security audit.