Mail Mint < 1.19.5 - Unauthenticated Emails Disclosure
58Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 7.5epss 1.4%
from disclosure to weapon
Published on NVDMar 4
VulnCheck+57d
exploitation probability
1.4%top 31% of all CVEs
observed exploitation
yesVulnCheck
The Mail Mint WordPress plugin before 1.19.5 does not have authorization in one of its REST API endpoint, allowing unauthenticated users to call it and retrieve the email addresses of users on the blog
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Unknown · Mail Mint