CVE-2026-42696: Royal Plugins Sitevault – Backup, Restore, Migration & Cloning

Critical severity, CVSS 10.0.

Unauthenticated Remote Code Execution (RCE) in SiteVault – Backup, Restore, Migration &amp; Cloning <= 1.5.19 versions.

Affected products

• Royal Plugins Sitevault – Backup, Restore, Migration &amp; Cloning: up to and including 1.5.19

Published 2026-10-10. Last modified 2026-10-10.