Beveiligingsadvies

CVE-2026-10750

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-01 06:00:01

Laatst bijgewerkt 2026-07-01 10:20:41

Toegewezen door WPScan

CVSS-score 8.1

Status PUBLISHED

Beschrijving

The Royal MCP WordPress plugin before 1.4.26 does not perform capability checks on the majority of its MCP tools after token authentication, allowing authenticated users with a low-privileged role such as Subscriber to read private content, enumerate all users and their roles, and create, modify, or delete content owned by other users.

← Alle CVE's bekijken Bekijk op cve.org ↗