CVE-2026-111106 Mail Mint <= 1.31.4 - Authenticated (Custom+) SQL Injection via 'filters' Parameter

The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL que...

PT-2026-115437

The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL que...

CVE-2026-111106: Improper Neutralization of Special Elements used in an SQL Command

The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL que...

WordPress Mail Mint SQL Injection Vulnerability

WordPress Mail Mint 1.31.4 and earlier versions have a SQL injection vulnerability. This vulnerability stems from improper handling of the filters parameter in the /wp-json/mrm/v1/segments/contacts REST endpoint. The value of the filter parameter provided by users is insufficiently escaped. In li...

WordPress Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance plugin <= 1.31.4 - Authenticated (Custom+) SQL Injection vulnerability

Authenticated Custom+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Mail Mint versions = 1.31.4...

Malicious code in sol-mint-utils (RubyGems)

Source: amazon-inspector 2940bc600ade9f91afdc44ccc04cdab589d276b0504b3f12ffb4a4e827920bd9 The gem ships a native-extension stub extconf.rb that gem install executes automatically, but no C/C++ sources accompany it and lib/solmintutils.rb is an inert stub defines VERSION and returns 'ok'. The READ...

Malicious Package

Overview sol-mint-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-108856

The UnicomAI Wanwu software through version 0.6.5 is vulnerable to an authorization bypass (CWE-639) via the POST /v1/appspace/app/key endpoint. This flaw allows authenticated users to mint AppKeys bound to other users' MCP servers by providing a victim's MCP server UUID and setting the appType t...

CVE-2026-108856 UnicomAI Wanwu through 0.6.5 Authorization Bypass via /v1/appspace/app/key AppKey Minting

UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP servers via POST /v1/appspace/app/key. Attackers supplying a victim's MCP server UUID with appType mcpserver can open MCP sessions and invoke the...

CVE-2026-108856

UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP servers via POST /v1/appspace/app/key. Attackers supplying a victim's MCP server UUID with appType mcpserver can open MCP sessions and invoke the...

EUVD-2026-97007

UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP servers via POST /v1/appspace/app/key. Attackers supplying a victim's MCP server UUID with appType mcpserver can open MCP sessions and invoke the...

MAL-2026-17795 Malicious code in sol-mint-utils (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2940bc600ade9f91afdc44ccc04cdab589d276b0504b3f12ffb4a4e827920bd9 The gem ships a native-extension stub extconf.rb that gem install executes automatically, but no C/C++ sources accompany it and lib/solmintutils.rb i...

Malicious code in sol-mint-utils (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2940bc600ade9f91afdc44ccc04cdab589d276b0504b3f12ffb4a4e827920bd9 The gem ships a native-extension stub extconf.rb that gem install executes automatically, but no C/C++ sources accompany it and lib/solmintutils.rb i...

PT-2026-110175

Name of the Vulnerable Software and Affected Versions UnicomAI Wanwu versions prior to 0.6.6 Description An authorization bypass allows authenticated users to mint AppKeys bound to MCP servers belonging to other users. By sending a request to the endpoint "/v1/appspace/app/key" and providing a...

CVE-2026-93509

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snapshot taken before crediting the recipient, allowing an authenticated attacker with Subscriber-level access to mint...

EUVD-2026-94830

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snapshot taken before crediting the recipient, allowing an authenticated attacker with Subscriber-level access to mint...

CVE-2026-93509: Improper Input Validation

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snapshot taken before crediting the recipient, allowing an authenticated attacker with Subscriber-level access to mint...

SUSE CVE-2026-104982

A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setupdocumentcontentlist/gstrdupprintf of the file backend/epub/epub-document.c of the component EPUB File Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely...

SUSE CVE-2026-104983

A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function gfilegetchild of the file shell/ev-window.c of the component PDF Attachment Saving Handler. Such manipulation of the argument attachment leads to path traversal. The attack may be performed from remote. The...

CVE-2026-78904-Digital-Dinar-Drain

CVE-2026-78904 — Drain de Dinar Numérique API d'émission de CBDC — Défaut logique Mint infini Champ| Valeur ---|--- Sévérité| 9.8 Critique Vecteur| Réseau Versions concernées| 2.1.0 – 2.1.3 Découvert par| 𝕍𝕠𝕤𝕤🥷 Description Un défaut logique critique dans l'API d'émission de CBDC permet à un...