Royal Plugins

Products

ProductCVEsExploitedLatest
Royal MCP2–Jun 25, 2026
SiteVault – Backup, Restore, Migration & Cloning2–Oct 10, 2026

Exploited and recent CVEs

  • CVE-2026-42696 Critical 10.0 WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability 0.4%
  • CVE-2026-105071 High 7.5 WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2026-54842 High 8.1 WordPress Royal MCP plugin <= 1.4.25 - Broken Access Control vulnerability 0.4%
  • CVE-2026-40775 High 7.3 WordPress Royal MCP plugin <= 1.4.2 - Broken Access Control vulnerability 0.2%