High-risk tools in Wordpress
19 of the 314 tools in Wordpress are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
fulfillment_fulfill_orderExecuteManually (force) run fulfillment for an order: renders the packing slip, creates the ClickUp task, notifies Slack. Bypasses the idempotency guard, so it can create a duplicate C...
-
fulfillment_reprint_jobExecuteReset a print job to pending so the agent prints it again. Returns { ok: true }; 404 { ok: false, error } for an unknown job.
-
fulfillment_update_checkExecuteForce an immediate plugin-update check (bypassing PUC
-
mcp_flush_rewriteExecuteFlush permalink rewrite rules
-
mcp_install_pluginExecuteInstall a plugin from WordPress.org by slug. If activation fails the plugin stays installed and activation_error says why.
-
mcp_install_plugin_zipExecuteInstall a plugin from a ZIP URL (GitHub releases, custom sources). The URL must end in .zip or be a github.com / api.github.com release asset URL (private repo assets supported ...
-
mcp_optimize_tablesExecuteRun OPTIMIZE TABLE on every table with the site
-
mcp_regenerate_thumbnailsExecuteRegenerate image thumbnails for a media item (images only)
-
mcp_run_action_schedulerExecuteRun due (past-due pending) Action Scheduler actions now through Action Scheduler
-
mcp_run_cronExecuteRun the earliest scheduled event of a cron hook now, like
-
mcp_search_replaceExecuteSearch and replace a string in every text column of the site
-
mcp_update_all_pluginsExecuteUpdate all plugins with available updates. cvrt-mcp-endpoints itself is never bulk-updated and is listed under skipped.
-
mcp_update_coreExecuteUpdate WordPress to the latest version. Returns { updated: false, message } when already up to date.
-
mcp_update_pluginExecuteUpdate a single plugin to the latest version. refresh:true first runs a fresh update check for it (wp.org and Plugin Update Checker / GitHub releases), so a just-released update...
-
seo_indexnow_pingExecuteSubmit URLs to IndexNow (one request per URL). Returns [{ url, ok, error? }]; ok means the site dispatched the ping (non-blocking), a failing URL does not stop the others.
-
seo_sitemap_pingExecuteSubmit the sitemap to Google Search Console (needs the search_console settings) and return the status Search Console reports. The old Google/Bing ping URLs are switched off.
-
woo_helper_invoices_refreshExecuteReload the provider
-
wp_activate_pluginExecuteActivate an installed plugin (via cvrt-mcp-endpoints, avoids the often-blocked core route)
-
wp_deactivate_pluginExecuteDeactivate an installed plugin (via cvrt-mcp-endpoints)
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.