WordPress Mail Mage plugin <= 0.0.25 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Erwan LR WPScan in WordPress Plugin Mail Mage versions = 0.0.25...

EUVD-2026-117895

The Mail Mage WordPress plugin through 0.0.25 does not properly sanitise and escape a user-supplied value before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-110532

The Mail Mage WordPress plugin, versions through 0.0.25 , is vulnerable to SQL injection . The flaw exists because the software fails to properly sanitize and escape user-supplied values before including them in a SQL statement. This security weakness allows unauthenticated attackers to perform S...