Dhamdham

**Name of the Vulnerable Software and Affected Versions** Royal MCP versions prior to 1.4.26 **Description** Royal MCP for WordPress contains a missing authorization flaw resulting from an incorrectly configured access control security level. The issue stems from a missing capability check within a function, allowing authenticated users with subscriber-level access or higher to perform unauthorized actions. **Recommendations** Update Royal MCP to version 1.4.26 or later.