CVE-2026-111961: The Royal MCP WordPress plugin before… – CVSS 3.8 · Watchpost