Royal Plugins vulnerabilities

Products

• Mcp 6
• Sitevault – Backup, Restore, Migration & Cloning 2

Newest

• royal plugins mcp, unknown royal mcp +1 more Royal MCP < 1.5.10 - Contributor+ Private and Draft Content Disclosure and publish_posts Bypass via elementor_clone_page CVE-2026-111961 3.8 LowOctober 28, 2026
• royal plugins mcp, unknown royal mcp +1 more Royal MCP 1.4.38 - 1.5.9 - Subscriber+ Non-Public Post Disclosure via wp_search Ability CVE-2026-111960 4.3 MediumOctober 28, 2026
• royal plugins mcp, unknown royal mcp +1 more Royal MCP < 1.5.7 - Authentication Bypass via Preview Link Token CVE-2026-111958 7.5 HighOctober 22, 2026
• royal plugins sitevault – backup, restore, migration &amp; cloning WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability CVE-2026-42696 10.0 CriticalOctober 10, 2026
• royal plugins sitevault – backup, restore, migration &amp; cloning WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerability CVE-2026-105071 7.5 HighOctober 6, 2026
• royal plugins mcp, unknown royal mcp +1 more Royal MCP < 1.4.26 - Subscriber+ Insufficient Authorization in MCP Tools CVE-2026-10750 8.1 HighJuly 1, 2026
• royal plugins mcp WordPress Royal MCP plugin <= 1.4.25 - Broken Access Control vulnerability CVE-2026-54842 8.1 HighJune 25, 2026
• royal plugins mcp WordPress Royal MCP plugin <= 1.4.2 - Broken Access Control vulnerability CVE-2026-40775 7.3 HighJune 15, 2026