Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance

Уязвимости

• CVE-2026-10196без авторизации≤ 1.31.0

  Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fields

  Критич. 9.8

• CVE-2026-84753без авторизации≤ 1.31.0

  WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability

  Критич. 9.8

• CVE-2025-59570высокие права≤ 1.18.6

  WordPress Mail Mint Plugin <= 1.18.6 - SQL Injection Vulnerability

  Высокий 7.6

• CVE-2025-58604высокие права≤ 1.18.5

  WordPress Mail Mint Plugin <= 1.18.5 - SQL Injection Vulnerability

  Высокий 7.6

• CVE-2026-23541без авторизации≤ 1.19.4

  WordPress Mail Mint plugin <= 1.19.4 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2025-47541без авторизации≤ 1.17.7

  WordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability

  Высокий 7.5

• CVE-2025-11967админ≤ 1.18.10

  Mail Mint <= 1.18.10 - Authenticated (Admin+) Arbitrary File Upload

  Высокий 7.2

• CVE-2026-84755без авторизации≤ 1.31.0

  WordPress Mail Mint plugin <= 1.31.0 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2026-1447без авторизации · нужен клик≤ 1.19.2

  Mail Mint <= 1.19.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

  Средний 5.4

• CVE-2026-19800админ≤ 1.31.0

  Mail Mint <= 1.31.0 - Authenticated (Custom+) SQL Injection via 'status' Parameter

  Средний 4.9

• CVE-2026-12918админ≤ 1.24.1

  Mail Mint <= 1.24.1 - Authenticated (Administrator+) SQL Injection via 'recipients' Parameter

  Средний 4.9

• CVE-2026-14342админ≤ 1.24.2

  Mail Mint <= 1.24.2 - Authenticated (Administrator+) SQL Injection via 'contact_ids' Parameter

  Средний 4.9

• CVE-2026-1258админ≤ 1.19.2

  Mail Mint <= 1.19.2 - Authenticated (Administrator+) SQL Injection via Multiple API Endpoints

  Средний 4.9

• CVE-2026-27349нужен вход≤ 1.19.5

  WordPress Mail Mint plugin <= 1.19.5 - Sensitive Data Exposure vulnerability

  Средний 4.3