CVE-2026-42696 is a critical vulnerability in SiteVault – Backup, Restore, Migration & Cloning plugin versions <= 1.5.19, allowing unauthenticated remote code execution. The CVE record was published on 2026-10-10T20:16:35.313Z and has not been modified since then.
A Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Royal MCP: from n/a through 1.4.25. The vulnerability could lead to unauthorized access if not properly addressed. Defenders should verify and update Royal MCP installations to prevent potential security breaches. This involves reviewing access contro [truncated]
CVE-2026-40775 is a HIGH severity vulnerability with a CVSS score of 7.3. It is an Unauthenticated Broken Access Control issue affecting Royal MCP plugin versions up to 1.4.2.