CVE-2026-111960

Royal MCP search exposes non-public content to subscriber accounts

Royal MCP maintainers · Royal MCP wp_search ability

First documented disclosure · Review checkpoint

Summary

Low-privilege callers can retrieve private entries through MCP search.

Severity and exploitation evidence

Medium · 4.3/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed primary sources do not establish malicious exploitation or a confirmed victim incident.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Search lacks object-level and post-type authorization.

Conditions required

An authenticated account such as a subscriber with access to the affected search tool.

Potential impact

Disclosure of titles, content and personal data stored by a companion plugin.

Affected versions and configurations

1.4.38 through 1.5.9.

Fix and mitigation status

1.5.10.

Practical next steps

Upgrade and restrict which accounts may connect MCP clients.

Operating lesson

Authorize every returned object rather than only access to the search tool.

Evidence and limits

WPScan’s original advisory is dated October 26; CNA publication is October 28. The primary page supplies CVSS 3.1 4.3; its PoC is scheduled for November 9, so the CNA exploit tag is not proof of public exploit code or active attacks.

Sources