Plugin icon

Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance

mail-mint

Vulnerabilities:

15

Last Updated:

September 15, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-09-08
Title
Mail Mint < 1.31.1 - Authenticated (Custom+) SQL Injection via 'status' Parameter
Fixed in
Fixed in 1.31.1
CVSS
4.9 (medium)
Published
2026-09-04
Title
Mail Mint < 1.31.1 - Unauthenticated PHP Object Injection in Arbitrary Form Fields
Fixed in
Fixed in 1.31.1
CVSS
9.8 (critical)
Published
2026-09-03
Title
Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails < 1.31.1 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 1.31.1
CVSS
8.1 (high)
Published
2026-09-03
Title
Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails < 1.31.1 - Missing Authorization
Fixed in
Fixed in 1.31.1
CVSS
5.3 (medium)
Published
2026-07-09
Title
Mail Mint < 1.24.2 - Authenticated (Administrator+) SQL Injection via 'recipients' Parameter
Fixed in
Fixed in 1.24.2
CVSS
4.9 (medium)
Published
2026-07-08
Title
Mail Mint < 1.24.3 - Authenticated (Administrator+) SQL Injection via 'contact_ids' Parameter
Fixed in
Fixed in 1.24.3
CVSS
4.9 (medium)
Published
2026-05-21
Title
Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails < 1.20.0 - Authenticated (Subscriber+) Information Exposure
Fixed in
Fixed in 1.20.0
CVSS
4.3 (medium)
Published
2026-02-18
Title
Mail Mint < 1.19.5 - Missing Authorization
Fixed in
Fixed in 1.19.5
CVSS
5.3 (medium)
Published
2026-02-13
Title
Mail Mint < 1.19.3 - Authenticated (Administrator+) SQL Injection via Multiple API Endpoints
Fixed in
Fixed in 1.19.3
CVSS
4.9 (medium)
Published
2026-02-11
Title
Mail Mint < 1.19.5 - Unauthenticated Emails Disclosure
Fixed in
Fixed in 1.19.5
CVSS
7.5 (high)
Published
2026-02-02
Title
Mail Mint < 1.19.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Fixed in
Fixed in 1.19.3
CVSS
5.4 (medium)
Published
2025-11-07
Title
Mail Mint < 1.18.11 - Authenticated (Admin+) Arbitrary File Upload
Fixed in
Fixed in 1.18.11
CVSS
7.2 (high)
Published
2025-09-22
Title
Mail Mint < 1.18.7 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 1.18.7
CVSS
4.9 (medium)
Published
2025-09-03
Title
Mail Mint < 1.18.6 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 1.18.6
CVSS
4.9 (medium)
Published
2025-05-07
Title
Mail Mint < 1.17.8 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 1.17.8
CVSS
5.3 (medium)