CVE-2026-14834

The vulnerability CVE-2026-14834 affects the Mailgun for WordPress plugin prior to version 2.2.1. An unauthenticated AJAX action (add_list) lacks capability and nonce checks, letting an attacker subscribe arbitrary email addresses to the site owner’s configured Mailgun mailing lists using the own...