| CVE-2026-111960 |
The Royal MCP WordPress plugin before 1.5.10 does not perform object-level or post-type authorisation checks in one…
|
4.3
Moyenne
|
28 oct. 2026 |
| CVE-2026-111961 |
The Royal MCP WordPress plugin before 1.5.10 does not perform an object-level permission check before duplicating a…
|
3.8
Faible
|
28 oct. 2026 |
| CVE-2026-111958 |
The Royal MCP WordPress plugin before 1.5.7 does not limit a preview-link token to the single preview it was issued…
|
7.5
Élevée
|
22 oct. 2026 |
| CVE-2026-10750 |
The Royal MCP WordPress plugin before 1.4.26 does not perform capability checks on the majority of its MCP tools…
|
8.1
Élevée
|
1 juil. 2026 |