WordPress plugin
Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 16 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High2
- Medium13
- Low0
All Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Authenticated (Custom+) SQL Injection via 'filters' Parameter ≤1.31.4Update to 1.31.5 | CVE-2026-111106 | |
| Medium4.9 | Authenticated (Custom+) SQL Injection via 'status' Parameter ≤1.31.0Update to 1.31.1 | CVE-2026-19800 | |
| Critical9.8 | Unauthenticated PHP Object Injection in Arbitrary Form Fields ≤1.31.0Update to 1.31.1 | CVE-2026-10196 | |
| High8.1 | Unauthenticated PHP Object Injection ≤1.31.0Update to 1.31.1 | CVE-2026-84753 | |
| Medium5.3 | Missing Authorization ≤1.31.0Update to 1.31.1 | CVE-2026-84755 | |
| Medium4.9 | Authenticated (Administrator+) SQL Injection via 'recipients' Parameter ≤1.24.1Update to 1.24.2 | CVE-2026-12918 | |
| Medium4.9 | Authenticated (Administrator+) SQL Injection via 'contact_ids' Parameter ≤1.24.2Update to 1.24.3 | CVE-2026-14342 | |
| Medium4.3 | Authenticated (Subscriber+) Information Exposure ≤1.19.5Update to 1.20.0 | CVE-2026-27349 | |
| Medium5.3 | Unauthenticated Information Disclosure <1.19.5Update to 1.19.5 | CVE-2026-2025 | |
| Medium5.3 | Missing Authorization ≤1.19.4Update to 1.19.5 | CVE-2026-23541 | |
| Medium4.9 | Authenticated (Administrator+) SQL Injection via Multiple API Endpoints ≤1.19.2Update to 1.19.3 | CVE-2026-1258 | |
| Medium5.4 | Cross-Site Request Forgery to Stored Cross-Site Scripting ≤1.19.2Update to 1.19.3 | CVE-2026-1447 | |
| High7.2 | Authenticated (Admin+) Arbitrary File Upload ≤1.18.10Update to 1.18.11 | CVE-2025-11967 | |
| Medium4.9 | Authenticated (Administrator+) SQL Injection ≤1.18.6Update to 1.18.7 | CVE-2025-59570 | |
| Medium4.9 | Authenticated (Administrator+) SQL Injection ≤1.18.5Update to 1.18.6 | CVE-2025-58604 | |
| Medium5.3 | Unauthenticated Sensitive Information Exposure ≤1.17.7Update to 1.17.8 | CVE-2025-47541 |
- Medium6.5Authenticated (Custom+) SQL Injection via 'filters' Parameter
≤1.31.4Update to 1.31.5
- Medium4.9Authenticated (Custom+) SQL Injection via 'status' Parameter
≤1.31.0Update to 1.31.1
- Critical9.8Unauthenticated PHP Object Injection in Arbitrary Form Fields
≤1.31.0Update to 1.31.1
- High8.1Unauthenticated PHP Object Injection
≤1.31.0Update to 1.31.1
- Medium5.3Missing Authorization
≤1.31.0Update to 1.31.1
- Medium4.9Authenticated (Administrator+) SQL Injection via 'recipients' Parameter
≤1.24.1Update to 1.24.2
- Medium4.9Authenticated (Administrator+) SQL Injection via 'contact_ids' Parameter
≤1.24.2Update to 1.24.3
- Medium4.3Authenticated (Subscriber+) Information Exposure
≤1.19.5Update to 1.20.0
- Medium5.3Unauthenticated Information Disclosure
<1.19.5Update to 1.19.5
- Medium5.3Missing Authorization
≤1.19.4Update to 1.19.5
- Medium4.9Authenticated (Administrator+) SQL Injection via Multiple API Endpoints
≤1.19.2Update to 1.19.3
- Medium5.4Cross-Site Request Forgery to Stored Cross-Site Scripting
≤1.19.2Update to 1.19.3
- High7.2Authenticated (Admin+) Arbitrary File Upload
≤1.18.10Update to 1.18.11
- Medium4.9Authenticated (Administrator+) SQL Injection
≤1.18.6Update to 1.18.7
- Medium4.9Authenticated (Administrator+) SQL Injection
≤1.18.5Update to 1.18.6
- Medium5.3Unauthenticated Sensitive Information Exposure
≤1.17.7Update to 1.17.8
Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance: common questions
Does Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance have known vulnerabilities?
Yes. VulnCrest Radar lists 16 known vulnerabilities in Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance: 1 critical, 2 high, 13 medium. None are known to affect version null.
How do I check which version of Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance vulnerability?
CVE-2026-111106, published Oct 15, 2026: Mail Mint <= 1.31.4 - Authenticated (Custom+) SQL Injection via 'filters' Parameter. Severity: Medium (CVSS 6.5).
Is any Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance vulnerability listed in CISA KEV?
No. None of the known Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance vulnerabilities is currently listed in the CISA KEV catalog.