Mail Mint – Newsletters, Email Marketing, Automation, Woocommerce Emails, Post Notification, And More
Approved changes feed: RSS · Atom
cpe:2.3:a:getwpfunnels:mail_mint_–_newsletters,_email_marketing,_automation,_woocommerce_emails,_post_notification,_and_more:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Getwpfunnels (4138e9de-bacf-5e30-8e2a-7be927f1a724) |
|---|---|
| Product | Mail Mint – Newsletters, Email Marketing, Automation, Woocommerce Emails, Post Notification, And More (bbdf8e8b-ee94-5320-9d47-11071f75735c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-11967 |
vulnerable | 2026-06-08 07:04:29.486686 |
Mail Mint <= 1.18.10 - Authenticated (Admin+) Arbitrary File Upload
HIGH (7.2)
The Mail Mint plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the process_contact_attribute_import function in all versions up to, and including, 1.18.10. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Published: 2025-11-08T09:28:11.511Z
Updated: 2026-04-08T17:24:41.225Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.