Advisories · Technology

WPFunnels Mail Mint.

Every CVE that names WPFunnels Mail Mint among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-84755 CVE record

CVSS 6.5 Medium

WordPress Mail Mint plugin <= 1.31.0 - Broken Access Control vulnerability
- WPFunnels Mail Mint
- Broken access control
Not analysed yet 3 Sept 2026
CVE-2026-84753 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability
- WPFunnels Mail Mint
- Insecure deserialization
Not analysed yet 3 Sept 2026
CVE-2026-23541 CVE record

CVSS 7.5 High

WordPress Mail Mint plugin <= 1.19.4 - Broken Access Control vulnerability
- WPFunnels Mail Mint
- Broken access control
Not analysed yet 19 Feb 2026
CVE-2025-59570 CVE record

CVSS 7.6 High

WordPress Mail Mint Plugin <= 1.18.6 - SQL Injection Vulnerability
- WPFunnels Mail Mint
- SQL injection
Not analysed yet 22 Sept 2025
CVE-2025-58604 CVE record

CVSS 7.6 High

WordPress Mail Mint Plugin <= 1.18.5 - SQL Injection Vulnerability
- WPFunnels Mail Mint
- SQL injection
Not analysed yet 3 Sept 2025
CVE-2025-47541 CVE record

CVSS 7.5 High

WordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability
- WPFunnels Mail Mint
- Information disclosure
Not analysed yet 23 May 2025