Royal Plugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Royal MCP | 2 | – | Jun 25, 2026 |
| SiteVault – Backup, Restore, Migration & Cloning | 2 | – | Oct 10, 2026 |
Exploited and recent CVEs
- CVE-2026-42696 WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability 0.4%
- CVE-2026-105071 WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerability 0.4%
- CVE-2026-54842 WordPress Royal MCP plugin <= 1.4.25 - Broken Access Control vulnerability 0.4%
- CVE-2026-40775 WordPress Royal MCP plugin <= 1.4.2 - Broken Access Control vulnerability 0.2%