Royal Plugins vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Royal Plugins products: 4 record(s), with severity, exploitation and fixes.

Royal MCP 2 SiteVault – Backup, Restore, Migration & Cloning 2

Exploited only (KEV) →

CVE-2026-42696 Critical · 10.0 CWE-94 Oct 10, 2026

WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration & Cloning sitevault-backup-restore-migration allows Remote Code Inclusion.This issue affects SiteVault – Backup, Restore, Migration & Cloning: from n/a through 1.5.19.

CVE-2026-105071 High · 7.5 CWE-201 Oct 6, 2026

WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions.

CVE-2026-54842 High · 8.1 CWE-862 Jun 25, 2026

WordPress Royal MCP plugin <= 1.4.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Royal MCP: from n/a through 1.4.25.

CVE-2026-40775 High · 7.3 CWE-862 Jun 15, 2026

WordPress Royal MCP plugin <= 1.4.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions.