Royal Plugins Royal MCP vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Royal Plugins Royal MCP: 2 record(s), with affected versions and fixes.
CVE-2026-54842
High · 8.1
CWE-862 Jun 25, 2026
WordPress Royal MCP plugin <= 1.4.25 - Broken Access Control vulnerability
Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Royal MCP: from n/a through 1.4.25.
CVE-2026-40775
High · 7.3
CWE-862 Jun 15, 2026
WordPress Royal MCP plugin <= 1.4.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions.