Royal Mcp Vulnerabilities

The Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.4.25. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an u...

CVSS:

4.3

Affected:

up to 1.4.25

Fixed in:

1.4.26

Disclosed:

Jun 18, 2026

CVE-2026-54842 on NVD →

The Royal MCP plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.4.25. This is due to a missing capability check on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 1.4.25

Fixed in:

1.4.26

Disclosed:

Jun 10, 2026

CVE-2026-10750 on NVD →

The Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.4.2. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 1.4.2

Fixed in:

1.4.3

Disclosed:

Apr 21, 2026

CVE-2026-40775 on NVD →