shouldiuse.io

Categories

VERDICT

Royal Plugins Review

Depends

Should I use Royal Plugins?

Royal Plugins built one plugin for every recurring WordPress issue — GuardPress for security, Royal AI Firewall for AI bots, ForgeCache for speed, SiteVault for backups, SEObolt for SEO, FormForge for forms, Royal Affiliate for partner tracking. - royalplugins.com

· 1 month ago

Free versions are a fine zero-cost try for hobby WordPress sites. Don't pay for the Pro bundle yet: two 2026 access-control CVEs in the flagship plugin, WordPress.org closures, and seven total reviews mean this tiny vendor is unproven.

Confidence

Medium. Based on ~30 public sources reviewed; independent review volume is very thin (7 reviews on flagship).

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo support-quality evidence found
  • Security posture

Pricing

$0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Pro (6 plugins)Founding pricing, price locked

Best for

  • Solo WordPress hobby and affiliate sites
  • AI tinkerers connecting WP to Claude or ChatGPT
  • Budget buyers wanting one-vendor plugin coverage

Not for

  • Sites handling payments or customer data
  • Anyone wanting a proven, heavily-reviewed vendor
  • Teams needing support SLAs or a public security page
  • Agencies running client sites at scale

Gotchas - check before you buy

high

'Price locked forever' founding deals only matter if this tiny vendor survives; verify refund terms.

high

Unauthenticated CVEs demand fast patching; if you skip updates, skip this vendor.

medium

Two closures suggest store policy friction; confirm listings are still live.

medium

Bundle upsell tempts buying all six Pro plugins; free versions may already cover small sites.

Pros and cons

Pros

  • One vendor covers security, caching, backups, SEO, forms, affiliate tracking
  • Free versions with no telemetry or license checks
  • GuardPress ships 30+ protection modules with 30-day audit trail
  • Founders bundle locks in pricing forever across six Pro plugins
  • Published case studies claim PageSpeed gains (73 to 96, 70 to 85)

Cons

  • Two 2026 CVEs in Royal MCP, including unauthenticated access-control flaws
  • Flagship plugin shows only 7 reviews; near-zero independent feedback
  • Two plugin closures detected within recent months
  • No security page on the vendor's own site
  • 481,000 lines across 14 plugins from one small shop

Sources & method

- 10 sources - Two 2026 CVEs in flagship Royal MCP (missing authorization, broken access control); vendor site shows no security page.

official x4review x2security x2news x2
  • CVE-2026-54842 — Missing Authorization in Royal MCP, Missing authorization flaw in the Royal MCP plugin, versions through 1.4; tracked by NVD and Rapid7.
  • CVE-2026-40775 — Broken access control in Royal MCP, Broken access control affecting Royal MCP plugin versions through 1.4.2.
  • CISA bulletin, June 15 2026 — unauthenticated issue, CISA's weekly vulnerability summary lists an unauthenticated broken access control issue in Royal MCP.

Key stats

  • Value for money: 4/5

    Rating

  • $0

    Starting price

  • 10

    Sources

  • Analyzed

  • Value for money: 4/5. Free tiers plus price-locked founding bundle
  • Ease of use: 4/5. Tutorials show one-activation speed wins
  • Feature depth: 4/5. 14 plugins, 481k lines, 30+ modules
  • Support quality. No support-quality evidence found
  • Security posture: 1/5. Two auth CVEs; no security page
  • 7 Flagship plugin reviews Royal MCP, per PluginScout
  • 2 2026 CVEs Both in Royal MCP
  • 14 plugins Suite size 481,000 lines of code
  • Yes Free tier Free versions on WordPress.org

Pricing

Free

$0

  • Royal AI Firewall, Royal Access, Royal MCP on WordPress.org
  • No telemetry or license checks

Pro (6 plugins)

Founding pricing, price locked

  • GuardPress, ForgeCache, SiteVault, SEObolt, FormForge, Royal Affiliate
  • Founders Bundle locks pricing forever

Security

Two 2026 CVEs in flagship Royal MCP (missing authorization, broken access control); vendor site shows no security page.

  • CVE-2026-54842 — Missing Authorization in Royal MCPMissing authorization flaw in the Royal MCP plugin, versions through 1.4; tracked by NVD and Rapid7.⁵
  • CVE-2026-40775 — Broken access control in Royal MCPBroken access control affecting Royal MCP plugin versions through 1.4.2.
  • CISA bulletin, June 15 2026 — unauthenticated issueCISA's weekly vulnerability summary lists an unauthenticated broken access control issue in Royal MCP.⁶

What users say

Independent user feedback is nearly nonexistent — roughly seven reviews on one tracker and little verifiable else.

Full analysis

Based on ~30 public sources reviewed; independent review volume is very thin (7 reviews on flagship).

Cheap broad WordPress plugin suite, but flagship has two 2026 auth CVEs, WordPress.org closures, tiny vendor, almost no reviews.

Methodology

Based on ~30 public sources reviewed; independent review volume is very thin (7 reviews on flagship).

Read how a report is made.

Sources

  1. Royal Plugins homepageroyalplugins.com
    official
  2. Royal Plugins pricing pageroyalplugins.com
    official
  3. GuardPress Pro product pageroyalplugins.com
    official
  4. Royal AI Firewall on WordPress.orgwordpress.org
    official
  5. NVD: CVE-2026-54842 Missing Authorizationnvd.nist.gov
    security
  6. CISA Vulnerability Summary, June 15 2026cisa.gov
    security
  7. Royal MCP reviews on PluginScoutpluginscout.io
    review
  8. WordPress.org Mass Closures trackerwp-packages.org
    news
  9. Terminal Blank case study on Royal Pluginsterminalblank.com
    news
  10. Reddit: connecting WordPress to Claudereddit.com
    review

Add this review to your site

This check for Royal Plugins says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Royal Plugins Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.