Live › vulnerability › CVE-2026-111958
Go to dashboardThe Royal MCP WordPress plugin before 1.5.7 does not restrict a preview-link token to the one preview it was issued for. Anyone holding a valid token is authenticated as the token's owner, typically an administrator, across the whole REST API, which allows full site takeover.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Royal MCP WordPress plugin before 1.5.7 are exposed, and the default configuration hands the preview token administrator rights. Sites that do not have the plugin installed or have already updated can skip it. Whether preview links are actively issued on a given site is unknown from the sources.
No product ranges from the sources yet.
wp plugin get royal-mcp --field=version (version is unknown from sources; slug assumed)wp plugin is-active royal-mcp1.5.7 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Royal MCP WordPress plugin before 1.5.7 does not limit a preview-link token to the single preview it was issued for, so any party that obtains a valid token is authenticated as the token's owning user, an administrator in the default configuration, across the entire REST API with no nonce, leading to full site takeover.
This page as .md · .json · in your agent: get_signal("CVE-2026-111958")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.