Lucene search
K

83 matches found

Nuclei
Nuclei
added yesterday10 views

Mail Mint < 1.19.5 - Unauthenticated Email Disclosure

Mail Mint WordPress plugin 1.19.5 contains an information disclosure vulnerability caused by lack of authorization in a REST API endpoint, letting unauthenticated users retrieve email addresses of blog users, exploit requires no authentication. id: CVE-2026-2025 info: name: Mail Mint 1.19.5 -...

7.5CVSS5.4AI score0.28814EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added last week6 views

CVE-2026-27349

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.19.5...

4.3CVSS5.5AI score0.0003EPSS
Exploits0References1
NVD
NVD
added 2026/05/21 9:16 a.m.8 views

CVE-2026-27349

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.19.5...

4.3CVSS0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/21 8:21 a.m.5 views

CVE-2026-27349 WordPress Mail Mint plugin <= 1.19.5 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.19.5...

4.3CVSS5.8AI score0.0003EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/21 8:21 a.m.7 views

EUVD-2026-31249

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.19.5...

4.3CVSS5.8AI score0.0003EPSS
Exploits0References1
CVE
CVE
added 2026/05/21 8:21 a.m.13 views

CVE-2026-27349

CVE-2026-27349 affects the WordPress Mail Mint plugin (versions

4.3CVSS5.8AI score0.0003EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/21 8:21 a.m.5 views

CVE-2026-27349

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.19.5...

4.3CVSS5.8AI score0.0003EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/21 8:21 a.m.34 views

CVE-2026-27349 WordPress Mail Mint plugin <= 1.19.5 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.19.5...

4.3CVSS0.0003EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/05/21 8:20 a.m.6 views

WordPress Mail Mint plugin <= 1.19.5 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Que Thanh Tuan in WordPress Plugin Mail Mint versions = 1.19.5...

4.3CVSS5.8AI score0.0003EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2026/05/21 12:0 a.m.5 views

WordPress plugin Mail Mint 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.3CVSS5.8AI score0.0003EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/21 12:0 a.m.7 views

PT-2026-42433

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.19.5...

4.3CVSS5.8AI score0.0003EPSS
Exploits0References2
VulnCheck KEV
VulnCheck KEV
added 2026/04/30 12:0 a.m.3 views

VulnCheck KEV: CVE-2026-2025

The Mail Mint WordPress plugin before 1.19.5 does not have authorization in one of its REST API endpoint, allowing unauthenticated users to call it and retrieve the email addresses of users on the blog...

7.5CVSS5.3AI score0.28814EPSS
In wildExploits0References2
VulnCheck KEV
VulnCheck KEV
added 2026/04/23 12:0 a.m.6 views

VulnCheck KEV: CVE-2026-23541

Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mail Mint: from n/a through = 1.19.4...

7.5CVSS5.2AI score0.00047EPSS
In wildExploits0References3
RedhatCVE
RedhatCVE
added 2026/03/05 7:51 a.m.3 views

CVE-2026-2025

The Mail Mint WordPress plugin before 1.19.5 does not have authorization in one of its REST API endpoint, allowing unauthenticated users to call it and retrieve the email addresses of users on the blog...

7.5CVSS6AI score0.28814EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/05 7:8 a.m.2 views

WordPress Mail Mint plugin < 1.19.5 - Unauthenticated Emails Disclosure vulnerability

Unauthenticated Emails Disclosure vulnerability discovered by yiğit ibrahim sağlam in WordPress Plugin Mail Mint versions 1.19.5...

7.5CVSS5.9AI score0.28814EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/03/04 6:30 a.m.0 views

EUVD-2026-9361

The Mail Mint WordPress plugin before 1.19.5 does not have authorization in one of its REST API endpoint, allowing unauthenticated users to call it and retrieve the email addresses of users on the blog...

7.5CVSS6AI score0.28814EPSS
Exploits0References2
NVD
NVD
added 2026/03/04 6:16 a.m.3 views

CVE-2026-2025

The Mail Mint WordPress plugin before 1.19.5 does not have authorization in one of its REST API endpoint, allowing unauthenticated users to call it and retrieve the email addresses of users on the blog...

7.5CVSS0.28814EPSS
Exploits0References1
CVE
CVE
added 2026/03/04 6:0 a.m.18 views

CVE-2026-2025

The CVE affects the Mail Mint WordPress plugin before version 1.19.5, where an unauthenticated user can call a REST API endpoint due to missing authorization, leading to exposure of blog user email addresses. Impact is user email disclosure; no exploitation specifics are provided beyond this. Rem...

7.5CVSS6AI score0.28814EPSS
In wildExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/04 6:0 a.m.1 views

CVE-2026-2025 Mail Mint < 1.19.5 - Unauthenticated Emails Disclosure

The Mail Mint WordPress plugin before 1.19.5 does not have authorization in one of its REST API endpoint, allowing unauthenticated users to call it and retrieve the email addresses of users on the blog...

6AI score0.28814EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/04 6:0 a.m.359 views

CVE-2026-2025 Mail Mint < 1.19.5 - Unauthenticated Emails Disclosure

The Mail Mint WordPress plugin before 1.19.5 does not have authorization in one of its REST API endpoint, allowing unauthenticated users to call it and retrieve the email addresses of users on the blog...

0.28814EPSS
Exploits0References1
Rows per page
Query Builder