CVE-2026-54842
WordPress Royal MCP plugin <= 1.4.25 - Broken Access Control vulnerability
Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Royal MCP: from n/a through 1.4.25.
CVSS 3.1 · 8.1 High
EPSS < 1%
KEV · Not listed
Vendors
Products