Unrated severityNVD Advisory· Published Jun 25, 2026· Updated Jun 25, 2026
WordPress Royal MCP plugin <= 1.4.25 - Broken Access Control vulnerability
CVE-2026-54842
Description
Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Royal MCP: from n/a through 1.4.25.
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.