CVE-2026-40775
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
There is an unauthenticated access control issue in Royal MCP versions <= 1.4.2.
Risk Assessment
Organizations may be exposed to unauthorized access to sensitive data or system functions.
Recommendation
It is recommended to upgrade to the latest version of Royal MCP to mitigate this vulnerability.
Other vulnerabilities in Royal MCP
See all- CVE-2026-111958High
The Royal MCP WordPress plugin before 1.5.7 does not limit a preview-link token to the single preview it was issued for. Any party with a valid token is authenticated as the token's owning user (an administrator by default) across the entire REST API without a nonce, leading to full site takeover.
- CVE-2026-10750High
The Royal MCP WordPress plugin before version 1.4.26 does not perform capability checks on most of its MCP tools after token authentication, allowing authenticated users with low-privileged roles such as Subscriber to read private content, enumerate all users and their roles, and create, modify, or delete content owned by other users.
- CVE-2026-54842High
Missing Authorization in Royal Plugins Royal MCP allows exploiting incorrectly configured access control security levels. This issue affects Royal MCP from n/a through 1.4.25.
Original NVD description (English source)
Unauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS