WP Clinic
Log in Sign up

CVE · High

CVE-2026-40775 — Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini [royal-mcp] < 1.4.3

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-40775 Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini [royal-mcp] < 1.4.3 Missing Authorization High 7.3 < 1.4.3 1.4.3 2026-04-21

CVE-2026-40775

The Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.4.2. This makes it possible for unauthenticated attackers to perform an unauthorized action.

Source: Wordfence

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.