← voltar
CVE-2026-2025

Mail Mint < 1.19.5 - Unauthenticated Emails Disclosure

CVSS 7.5 HIGHEPSS 1.4%CWE-200
The Mail Mint WordPress plugin before 1.19.5 does not have authorization in one of its REST API endpoint, allowing unauthenticated users to call it and retrieve the email addresses of users on the blog
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Unknown · Mail Mint

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →