Vendors / Royal Plugins Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now Royal Plugins records in CISA KEV No Royal Plugins vulnerabilities are listed in CISA KEV.
Priority MEDIUM 49
Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration & Cloning sitevault-backup-restore-migration allows Remote Code Inclusion.This issue aff…
CVSS 3.1 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00375 · Published 2026-10-10 · No fix listed CWE-94
Priority LOW 39
Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00398 · Published 2026-10-06 · No fix listed CWE-201
Priority LOW 37
Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.0035 · Published 2026-06-25 · No fix listed CWE-862
Priority LOW 37
Unauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions.
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.00224 · Published 2026-06-15 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
1 3 0 0 0
