CyberRota
← Ana sayfaya dön

CVE-2026-10750

HIGH · CVSS 8.1 EPSS %0.19

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-01T07:16:21.890 · Çekilme zamanı: 2026-07-01T18:36:35.650498+00:00

CyberRota Yorumu

Saldırganın giriş yapmış olması gerekebilir.

CVE
CVE-2026-10750
Severity
HIGH
CVSS
8.1
EPSS
%0.19
WordPress

Orijinal NVD Açıklaması

The Royal MCP WordPress plugin before 1.4.26 does not perform capability checks on the majority of its MCP tools after token authentication, allowing authenticated users with a low-privileged role such as Subscriber to read private content, enumerate all users and their roles, and create, modify, or delete content owned by other users.