CVE-2026-111960: The Royal MCP WordPress plugin before… – CVSS 4.3 · Watchpost