{"id":"CVE-2026-111958","kind":"vulnerability","aliases":["CVE-2026-111958"],"related":[],"title":"Royal MCP WordPress plugin: preview token grants full administrator access","description":"The Royal MCP  WordPress plugin before 1.5.7 does not limit a preview-link token to the single preview it was issued for, so any party that obtains a valid token is authenticated as the token's owning user, an administrator in the default configuration, across the entire REST API with no nonce, leading to full site takeover.","summary":"The Royal MCP WordPress plugin before 1.5.7 does not restrict a preview-link token to the one preview it was issued for. Anyone holding a valid token is authenticated as the token's owner, typically an administrator, across the whole REST API, which allows full site takeover.","severity":"high","cvss":7.5,"epss":0.0019,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["mcp","package","self-hosted","wordpress","wordpress-plugin"],"not_affected_if":["plugin-not-installed","updated-to-1.5.7"],"how_to_check":"- Check the installed Royal MCP plugin version in the WordPress admin plugins list or with `wp plugin get royal-mcp --field=version` (version is unknown from sources; slug assumed)\n- Confirm whether the site has the plugin active with `wp plugin is-active royal-mcp`","fix":"- Update the Royal MCP plugin to `1.5.7` or later\n- If the plugin cannot be updated, deactivate it until it is patched\n- Rotate any preview-link tokens and administrator credentials if the site was exposed","status":"open","published_at":"2026-10-22T06:17:14+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","triaged_at":"2026-10-25T03:16:15+00:00","updated_at":"2026-10-25T03:16:15+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T03:16:15Z","model":"claude-haiku-5-5","output":{"fix":"- Update the Royal MCP plugin to `1.5.7` or later\n- If the plugin cannot be updated, deactivate it until it is patched\n- Rotate any preview-link tokens and administrator credentials if the site was exposed","reach":"internet","title":"Royal MCP WordPress plugin: preview token grants full administrator access","impact":"high","summary":"The Royal MCP WordPress plugin before 1.5.7 does not restrict a preview-link token to the one preview it was issued for. Anyone holding a valid token is authenticated as the token's owner, typically an administrator, across the whole REST API, which allows full site takeover.","category":"package","nicknames":[],"who_cares":["wordpress","wordpress-plugin","self-hosted","mcp"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker gets administrator access and takes over the whole site","analyst_note":"Confirm the exact affected version range and how a preview token is obtained, using the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-111958.","how_to_check":"- Check the installed Royal MCP plugin version in the WordPress admin plugins list or with `wp plugin get royal-mcp --field=version` (version is unknown from sources; slug assumed)\n- Confirm whether the site has the plugin active with `wp plugin is-active royal-mcp`","needs_analyst":true,"not_affected_if":["plugin-not-installed","updated-to-1.5.7"],"who_is_affected":"Sites running the Royal MCP WordPress plugin before 1.5.7 are exposed, and the default configuration hands the preview token administrator rights. Sites that do not have the plugin installed or have already updated can skip it. Whether preview links are actively issued on a given site is unknown from the sources.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000668,"input_tokens":3362,"output_tokens":664,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-111958':13A,16A '-2026':12A,15A '1.5.7':32B,80C 'access':10A 'across':64B,119C 'administr':9A,63B,114C 'allow':70B 'anyon':49B 'api':68B,123C 'authent':55B,106C 'configur':118C 'cve':11A,14A 'default':117C 'entir':121C 'full':8A,71B,129C 'grant':7A 'hold':50B 'host':21B 'issu':47B,95C 'lead':127C 'limit':83C 'link':39B,87C 'mcp':2A,17B,28B,76C 'nonc':126C 'obtain':101C 'one':43B 'own':111C 'owner':60B 'packag':18B 'parti':99C 'plugin':4A,25B,30B,78C 'preview':5A,38B,44B,86C,92C 'preview-link':37B,85C 'rest':67B,122C 'restrict':35B 'royal':1A,27B,75C 'self':20B 'self-host':19B 'singl':91C 'site':72B,130C 'takeov':73B,131C 'token':6A,40B,53B,58B,88C,104C,109C 'typic':61B 'user':112C 'valid':52B,103C 'whole':66B 'wordpress':3A,22B,24B,29B,77C 'wordpress-plugin':23B","nicknames":[],"mitigations":[],"who_affected":"Sites running the Royal MCP WordPress plugin before 1.5.7 are exposed, and the default configuration hands the preview token administrator rights. Sites that do not have the plugin installed or have already updated can skip it. Whether preview links are actively issued on a given site is unknown from the sources.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T06:17:14+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111958","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111958","severity":null,"published_at":"2026-10-22T06:17:14+00:00","modified_at":"2026-10-22T15:16:14+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-111958","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-111958","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:52+00:00","fetched_at":"2026-10-24T07:15:52+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}