Vulnerabilities

TI-2026-70344 CVE-2026-42696 · GHSA-hq6c-2hxp-47rv

Remote code inclusion in SiteVault WordPress plugin

MEDIUM 49

Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration & Cloning sitevault-backup-restore-migration allows Remote Code Inclusion.This issue aff…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00375 Published 2026-10-10 No fix listed CWE-94

TI-2026-68305 CVE-2026-105071 · GHSA-7jm2-9g83-27p4

Sensitive data exposure in SiteVault WordPress backup plugin

LOW 39

Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00398 Published 2026-10-06 No fix listed CWE-201

TI-2026-39645 CVE-2026-54842 · GHSA-7649-6hf2-rxrp

WordPress Royal MCP plugin <= 1.4.25 - Broken Access Control vulnerability

LOW 37

Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0035 Published 2026-06-25 No fix listed CWE-862

TI-2026-29444 CVE-2026-40775 · GHSA-45gp-ghq2-mh75

WordPress Royal MCP plugin <= 1.4.2 - Broken Access Control vulnerability

LOW 37

Unauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00224 Published 2026-06-15 No fix listed CWE-862

Vulnerabilities

Filters

Remote code inclusion in SiteVault WordPress plugin

Sensitive data exposure in SiteVault WordPress backup plugin

WordPress Royal MCP plugin <= 1.4.25 - Broken Access Control vulnerability

WordPress Royal MCP plugin <= 1.4.2 - Broken Access Control vulnerability