WordPress Mail Mint Plugin <= 1.18.6 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Le Cong Danh vodanh in WordPress Plugin Mail Mint versions = 1.18.6...

CVE-2025-59570 WordPress Mail Mint Plugin <= 1.18.6 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through = 1.18.6...

CVE-2025-59570 WordPress Mail Mint Plugin <= 1.18.6 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFunnels Mail Mint allows SQL Injection. This issue affects Mail Mint: from n/a through 1.18.6...

CVE-2025-59570

CVE-2025-59570 describes an SQL injection in Mail Mint (WordPress Mail Mint plugin) due to improper neutralization of special elements in SQL commands. Affected: Mail Mint versions up to 1.18.6. CVSSv3.1 base score 7.6 (HIGH); attack vector: NETWORK; privileges required: HIGH; user interaction: N...

CVE-2025-53454 WordPress Ultimate WP Mail Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rustaurius Ultimate WP Mail allows Stored XSS. This issue affects Ultimate WP Mail: from n/a through 1.3.8...

CVE-2025-53454

CVE-2025-53454 - Stored XSS in Ultimate WP Mail (WordPress) Description: Improper Neutralization of Input During Web Page Generation (Stored Cross-Site Scripting) in Ultimate WP Mail. Affected: Ultimate WP Mail versions up to 1.3.8. Note: Exploit details are not provided in the initial document, ...

CVE-2025-53454 WordPress Ultimate WP Mail Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Stored XSS.This issue affects Ultimate WP Mail: from n/a through = 1.3.8...

CVE-2025-57992

CVE-2025-57992 : CSRF vulnerability in Mail Baby SMTP (InterServer) affects Mail Baby SMTP up to version 2.8. CVSS 3.1 base score 4.3 (Medium); attack vector: network; privileges: none; user interaction required. Public details in the provided documents are limited; connected sources do not add c...

CVE-2025-57992 WordPress Mail Baby SMTP plugin <= 2.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in InterServer Mail Baby SMTP mail-baby-smtp allows Cross Site Request Forgery.This issue affects Mail Baby SMTP: from n/a through = 2.8...

CVE-2025-57992 WordPress Mail Baby SMTP Plugin <= 2.8 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in InterServer Mail Baby SMTP allows Cross Site Request Forgery. This issue affects Mail Baby SMTP: from n/a through 2.8...

CVE-2025-58018 WordPress Mail Subscribe List Plugin <= 2.1.10 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Leishman Mail Subscribe List mail-subscribe-list allows Stored XSS.This issue affects Mail Subscribe List: from n/a through = 2.1.10...

CVE-2025-58018 WordPress Mail Subscribe List Plugin <= 2.1.10 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Leishman Mail Subscribe List mail-subscribe-list allows Stored XSS.This issue affects Mail Subscribe List: from n/a through = 2.1.10...

CVE-2025-58018

CVE-2025-58018 is a stored cross-site scripting vulnerability described as an improper neutralization of input during web page generation in the WordPress plugin Mail Subscribe List . The issue affects the plugin versions from n/a up to 2.1.10 . The CVSS score in the referenced data is 6.5 (Mediu...

CVE-2025-57992: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in InterServer Mail Baby SMTP mail-baby-smtp allows Cross Site Request Forgery.This issue affects Mail Baby SMTP: from n/a through = 2.8...

PT-2025-39045

Name of the Vulnerable Software and Affected Versions WPFunnels Mail Mint versions through 1.18.6 Description A flaw exists in WPFunnels Mail Mint that allows for SQL Injection. The issue is due to improper neutralization of special elements within SQL commands. This could potentially allow an...

CVE-2025-59570: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through = 1.18.6...

CVE-2025-53454: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Stored XSS.This issue affects Ultimate WP Mail: from n/a through = 1.3.8...

CVE-2025-58018: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Leishman Mail Subscribe List mail-subscribe-list allows Stored XSS.This issue affects Mail Subscribe List: from n/a through = 2.1.10...

PT-2025-38842

Name of the Vulnerable Software and Affected Versions InterServer Mail Baby SMTP versions through 2.8 Description A Cross-Site Request Forgery CSRF issue exists in InterServer Mail Baby SMTP. This allows attackers to perform actions on behalf of authenticated users. The issue allows Cross Site...

WordPress plugin Mail Baby SMTP has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...