Royal Plugins vulnerabilities
We track 2 vulnerabilities in Royal Plugins products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2026.
2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score
Latest Royal Plugins vulnerabilities
- 10.0 Critical severity
SiteVault – Backup, Restore, Migration &…: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration & Cloning sitevault-backup-restore-migration allows Remote Code Inclusion.This issue affects SiteVault – Backup, Restore, Migrat
- 8.1 High severity
Royal MCP: Missing Authorization
Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Royal MCP: from n/a through 1.4.25.