Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-54842

WordPress Royal MCP plugin <= 1.4.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Royal MCP: from n/a through 1.4.25.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Royal Plugins Wordpress
Products
Royal Mcp Wordpress
CVE-2026-42696

WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration &amp; Cloning sitevault-backup-restore-migration allows Remote Code Inclusion.This issue affects SiteVault – Backup, Restore, Migration &amp; Cloning: from n/a through 1.5.19.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Royal Plugins Wordpress-extensions
Products
Sitevault – Backup, Restore, Migration &amp; Cloning Sitevault
CVE-2026-105071

WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration &amp; Cloning <= 1.5.17 versions.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Royal Plugins Wordpress-extensions
Products
Sitevault Sitevault