PatchSiren

Royal Plugins CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Royal Plugins CVE published 2026-10-10

CVE-2026-42696

CVE-2026-42696 is a critical vulnerability in SiteVault – Backup, Restore, Migration & Cloning plugin versions <= 1.5.19, allowing unauthenticated remote code execution. The CVE record was published on 2026-10-10T20:16:35.313Z and has not been modified since then.

HIGH Royal Plugins CVE published 2026-06-25

CVE-2026-54842

A Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Royal MCP: from n/a through 1.4.25. The vulnerability could lead to unauthorized access if not properly addressed. Defenders should verify and update Royal MCP installations to prevent potential security breaches. This involves reviewing access contro [truncated]

HIGH Royal Plugins CVE published 2026-06-15

CVE-2026-40775

CVE-2026-40775 is a HIGH severity vulnerability with a CVSS score of 7.3. It is an Unauthenticated Broken Access Control issue affecting Royal MCP plugin versions up to 1.4.2.