CVE Catalog
CVE-2026-27349
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.17%
7th percentile - higher than 7% of all known CVEs
Summary
The WordPress plugin Mail Mint up to version 1.19.5 exposes sensitive system information to unauthorized entities, allowing retrieval of embedded sensitive data.
Risk Assessment
An attacker may access confidential system data such as API keys, passwords, or other configuration data, potentially leading to further attacks.
Recommendation
Update the Mail Mint plugin to the latest available version. Restrict access to sensitive data through proper authorization mechanisms.
Original NVD description (English source)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.19.5.