EUVD-2026-40914

The Royal MCP WordPress plugin before 1.4.26 does not perform capability checks on the majority of its MCP tools after token authentication, allowing authenticated users with a low-privileged role such as Subscriber to read private content, enumerate all users and their roles, and create, modify,...

Enumerate PostgreSQL Roles

Enumerate roles, login capability, and privilege flags from kittysploit import from lib.protocols.postgresql.postgresqlclient import PostgreSQLClient class ModulePost, PostgreSQLClient: info = "name": "Enumerate PostgreSQL Roles", "description": "Enumerate roles, login capability, and privilege...

Enumerate MySQL Roles

Enumerate MySQL roles and role assignments to users from kittysploit import from lib.protocols.mysql.mysqlclient import MySQLClient class ModulePost, MySQLClient: info = "name": "Enumerate MySQL Roles", "description": "Enumerate MySQL roles and role assignments to users", "author": "KittySploit...