CVE-2026-111961: Unknown Royal MCP: The Royal MCP WordPress plugin before 1.5.10 does not perform an object-level permission check before duplicating a…

The Royal MCP WordPress plugin before 1.5.10 does not perform an object-level permission check before duplicating a requested page, relying on a generic capability, which allows users with contributor-level access to read the full content of any private or draft page and to publish it without...

CVE-2026-10750 Royal MCP < 1.4.26 - Subscriber+ Insufficient Authorization in MCP Tools

The Royal MCP WordPress plugin before 1.4.26 does not perform capability checks on the majority of its MCP tools after token authentication, allowing authenticated users with a low-privileged role such as Subscriber to read private content, enumerate all users and their roles, and create, modify,...

PT-2018-11348

Name of the Vulnerable Software and Affected Versions GIMP versions 2.10.2 and earlier Description The issue arises from the use of g get tmp dir calls to establish temporary filenames, which may result in a filename that already exists. This is demonstrated by the gimp write and read file functi...

CVE-2009-2077: Undefined Security Weakness

Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and 1 read unpublished content from anonymous users when a view is already configured to display the content, and 2 read private content in generated queries...