Advisories · Technology
Royal MCP.
Every CVE that names Royal MCP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.8 Low
Royal MCP < 1.5.10 - Contributor+ Private and Draft Content Disclosure and publish_posts Bypass via elementor_clone_page
- Royal MCP
- Broken access control
- CVSS 4.3 Medium
Royal MCP 1.4.38 - 1.5.9 - Subscriber+ Non-Public Post Disclosure via wp_search Ability
- Royal MCP
- Broken access control
- CVSS 7.5 High
Royal MCP < 1.5.7 - Authentication Bypass via Preview Link Token
- Royal MCP
- Authentication bypass
- CVSS 8.1 High
Royal MCP < 1.4.26 - Subscriber+ Insufficient Authorization in MCP Tools
- Royal MCP