849 matches found
CVE-2025-59570
CVE-2025-59570 describes an SQL injection in Mail Mint (WordPress Mail Mint plugin) due to improper neutralization of special elements in SQL commands. Affected: Mail Mint versions up to 1.18.6. CVSSv3.1 base score 7.6 (HIGH); attack vector: NETWORK; privileges required: HIGH; user interaction: N...
CVE-2025-59570 WordPress Mail Mint Plugin <= 1.18.6 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFunnels Mail Mint allows SQL Injection. This issue affects Mail Mint: from n/a through 1.18.6...
PT-2025-39045
Name of the Vulnerable Software and Affected Versions WPFunnels Mail Mint versions through 1.18.6 Description A flaw exists in WPFunnels Mail Mint that allows for SQL Injection. The issue is due to improper neutralization of special elements within SQL commands. This could potentially allow an...
WordPress plugin WPFunnels Mail Mint SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A SQL injection...
CVE-2025-58604
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through = 1.18.5...
CVE-2025-58604
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through = 1.18.5...
WordPress Mail Mint Plugin <= 1.18.5 - SQL Injection Vulnerability
SQL Injection Vulnerability discovered by Le Cong Danh vodanh in WordPress Plugin Mail Mint versions = 1.18.5...
CVE-2025-58604
CVE-2025-58604 WordPress Mail Mint Plugin
CVE-2025-58604 WordPress Mail Mint Plugin <= 1.18.5 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through = 1.18.5...
CVE-2025-58604 WordPress Mail Mint Plugin <= 1.18.5 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through = 1.18.5...
PT-2025-35738
Name of the Vulnerable Software and Affected Versions: WPFunnels Mail Mint versions through 1.18.5 Description: WPFunnels Mail Mint is susceptible to a SQL Injection issue due to improper neutralization of special elements used in an SQL command. Recommendations: Versions prior to 1.19 are affect...
WordPress plugin Mail Mint SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
Malicious code in mint-backend (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13804e154bae1eba072cd15e94a81c7d0e03e959552fd66f99f4c9de162b2db2 The OpenSSF Package Analysis project identified 'mint-backend' @ 2.0....
MAL-2025-6943 Malicious code in mint-backend (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13804e154bae1eba072cd15e94a81c7d0e03e959552fd66f99f4c9de162b2db2 The OpenSSF Package Analysis project identified 'mint-backend' @ 2.0....
Ransomware negotiator investigated over criminal gang kickbacks
If someone is going to negotiate with criminals for you, that person should at least be on your side. That might not have been the case at Digital Mint, a ransomware negotiation company where one worker allegedly went rogue. According to Bloomberg, Digital Mint is cooperating with the US Departme...
CVE-2025-47541
Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.This issue affects Mail Mint: from n/a through = 1.17.7...
CVE-2025-47541
Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.This issue affects Mail Mint: from n/a through = 1.17.7...
CVE-2025-47541 WordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.This issue affects Mail Mint: from n/a through = 1.17.7...
CVE-2025-47541 WordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.This issue affects Mail Mint: from n/a through = 1.17.7...
CVE-2025-47541
CVE-2025-47541 affects WordPress Mail Mint plugin (versions up to 1.17.7). The issue is described as an insertion of sensitive information into sent data, allowing retrieval of embedded sensitive data. Public sources and vulnerability records consistently list this as a sensitive data exposure vu...