Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails

Information

Software Type Plugin
Software Slug mail-mint (view on wordpress.org)
Software Status Active
Software Author getwpfunnels
Software Website getwpfunnels.com
Software Downloads 419,589
Software Active Installs 5,000
Software Record Last Updated August 15, 2026

11 Vulnerabilities

Submit a Vulnerability
Mail Mint <= 1.24.1 - Authenticated (Administrator+) SQL Injection via 'recipients' Parameter
4.9
CVE-2026-12918
Jul 9, 2026
Researcher: Wordfence PRISM
Mail Mint <= 1.24.2 - Authenticated (Administrator+) SQL Injection via 'contact_ids' Parameter
4.9
CVE-2026-14342
Jul 8, 2026
Researcher: Wordfence PRISM
Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails <= 1.19.5 - Authenticated (Subscriber+) Information Exposure
4.3
CVE-2026-27349
May 21, 2026
Researcher: Que Thanh Tuan
Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more < 1.19.5 - Unauthenticated Information Disclosure
5.3
CVE-2026-2025
Mar 5, 2026
Researcher: ibrahimsql
Mail Mint <= 1.19.4 - Missing Authorization
5.3
CVE-2026-23541
Feb 18, 2026
Researcher: Denver Jackson
Mail Mint <= 1.19.2 - Authenticated (Administrator+) SQL Injection via Multiple API Endpoints
4.9
CVE-2026-1258
Feb 13, 2026
Researcher: Paolo Tresso
Mail Mint <= 1.19.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
5.4
CVE-2026-1447
Feb 2, 2026
Researcher: w41bu1
Mail Mint <= 1.18.10 - Authenticated (Admin+) Arbitrary File Upload
7.2
CVE-2025-11967
Nov 7, 2025
Researcher: vodanh
Mail Mint <= 1.18.6 - Authenticated (Administrator+) SQL Injection
4.9
CVE-2025-59570
Sep 22, 2025
Researcher: vodanh
Mail Mint <= 1.18.5 - Authenticated (Administrator+) SQL Injection
4.9
CVE-2025-58604
Sep 3, 2025
Researcher: vodanh
Mail Mint <= 1.17.7 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2025-47541
May 7, 2025
Researcher: Denver Jackson
Title Status CVE ID CVSS Researchers Date
Mail Mint <= 1.24.1 - Authenticated (Administrator+) SQL Injection via 'recipients' Parameter Patched CVE-2026-12918 4.9 Wordfence PRISM July 9, 2026
Mail Mint <= 1.24.2 - Authenticated (Administrator+) SQL Injection via 'contact_ids' Parameter Patched CVE-2026-14342 4.9 Wordfence PRISM July 8, 2026
Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails <= 1.19.5 - Authenticated (Subscriber+) Information Exposure Patched CVE-2026-27349 4.3 Que Thanh Tuan May 21, 2026
Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more < 1.19.5 - Unauthenticated Information Disclosure Patched CVE-2026-2025 5.3 ibrahimsql March 5, 2026
Mail Mint <= 1.19.4 - Missing Authorization Patched CVE-2026-23541 5.3 Denver Jackson February 18, 2026
Mail Mint <= 1.19.2 - Authenticated (Administrator+) SQL Injection via Multiple API Endpoints Patched CVE-2026-1258 4.9 Paolo Tresso February 13, 2026
Mail Mint <= 1.19.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting Patched CVE-2026-1447 5.4 w41bu1 February 2, 2026
Mail Mint <= 1.18.10 - Authenticated (Admin+) Arbitrary File Upload Patched CVE-2025-11967 7.2 vodanh November 7, 2025
Mail Mint <= 1.18.6 - Authenticated (Administrator+) SQL Injection Patched CVE-2025-59570 4.9 vodanh September 22, 2025
Mail Mint <= 1.18.5 - Authenticated (Administrator+) SQL Injection Patched CVE-2025-58604 4.9 vodanh September 3, 2025
Mail Mint <= 1.17.7 - Unauthenticated Sensitive Information Exposure Patched CVE-2025-47541 5.3 Denver Jackson May 7, 2025

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation