← Database

CVE-2026-2025

HIGH CVSS: 7.5 Published: 2026-03-04 Modified: 2026-06-17

Description

The Mail Mint WordPress plugin before 1.19.5 does not have authorization in one of its REST API endpoint, allowing unauthenticated users to call it and retrieve the email addresses of users on the blog

Affected Platforms

Unknown

Weakness Type

CWE-200

References