CVE-2026-40775
WordPress Royal MCP plugin <= 1.4.2 - Broken Access Control vulnerability
HIGH 7.3EPSS 0.3%
Unauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions.
- Affected
- Royal Plugins · Royal MCP
- CVSS v3.1 PATCHSTACK
- 7.3 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - EPSS
- 0.30% chance of exploitation in the next 30 days, 21st percentile
- Published
- 2026-06-15
- Updated
- 2026-06-16
Proof-of-concept exploits (1)
- AlexisLafontaine1995/cve0★ · 2026-09-30