Unauthenticated Broken Access Control in Mail Mint <= 1.31.0 versions.
Product
WPFunnels Mail Mint vulnerabilities
5 published CVES affecting WPFunnels Mail Mint, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 5
- Critical
- 1
- High
- 3
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest WPFunnels Mail Mint CVEs
Newest publication first
-
MediumCVSS 6.5 EPSS 0.27%
-
CriticalCVSS 9.8 EPSS 0.56%
Unauthenticated PHP Object Injection in Mail Mint <= 1.31.0 versions.
-
HighCVSS 7.5 EPSS 0.33%
Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mail Mint: from n/a through <= 1.19.4.
-
HighCVSS 7.6 EPSS 0.36%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through <= 1.18.6.
-
HighCVSS 7.6 EPSS 0.36%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through <= 1.18.5.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.