CVE-2026-54842

creationtimestamp| type| source ---|---|--- 2026-06-25 15:51:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4rvrpi3o2j...

CVE-2026-54842

The CVE describes a Missing Authorization vulnerability in the WordPress Royal MCP plugin (Royal MCP) affecting versions up to 1.4.25. The issue is categorized as Broken Access Control with a CVSS v3.1 base score of 8.1 (HIGH), with network attack vector, low attack complexity, and privileges req...