Study of 281 MCP plugins: 72% expose high-privilege actions; 1 in 10 fully exploitable

Code Execution Through Email: How I Used Claude to Hack Itself