The Royal MCP WordPress plugin, versions prior to 1.5.7, fails to bind a preview‑link token to the specific preview it was issued for. As a result, any party that obtains a valid token is implicitly authenticated as the token’s owning user. In the default configuration this account is an administrator, so the attacker gains full control over the site. This vulnerability is an authentication bypass. The lack of a nonce requirement in the REST API requests further simplifies the exploitation, allowing the attacker to use the token across any endpoint the user can access.

Royal MCP WordPress plugin earlier than version 1.5.7 when installed on a WordPress site. The default assumption is that the owner of a preview link is the administrator account, but the plugin does not enforce this. No other vendors or product versions are implicated in the CVE description.

Based on the description, it is inferred that an attacker can use a network‑level request to the WordPress REST API with a stolen preview‑link token, as the token is accepted without a nonce and is not bound to a specific preview. This inferred attack vector allows an attacker to be authenticated as the token’s owning user, which defaults to an administrator. The CVSS score of 7.5 indicates high severity, and the EPSS score of < 1% shows a very low but nonzero exploitation probability. The vulnerability is not listed in the CISA KEV catalog. With the lack of a nonce requirement, the exploitation can be carried out from any host that can reach the REST API, potentially granting the attacker full site takeover without additional credentials.