Mail Mint Email Marketing Automation Woocommerce Emails With Ai Assistance
Monthly
SQL injection in the Mail Mint plugin for WordPress (versions up to and including 1.31.4) allows an authenticated attacker with the plugin-specific 'mint_read_contacts' capability to read sensitive database contents through the /wp-json/mrm/v1/segments/contacts REST endpoint. The issue is a genuine but moderate-priority SQL injection rather than a top-tier emergency because the capability is granted only to Administrators by default, although sites that have delegated it to lower-privileged roles via Mail Mint's role manager face greater risk. No public exploit identified at time of analysis; no KEV or EPSS data was provided.
SQL injection in the Mail Mint plugin for WordPress (versions up to and including 1.31.4) allows an authenticated attacker with the plugin-specific 'mint_read_contacts' capability to read sensitive database contents through the /wp-json/mrm/v1/segments/contacts REST endpoint. The issue is a genuine but moderate-priority SQL injection rather than a top-tier emergency because the capability is granted only to Administrators by default, although sites that have delegated it to lower-privileged roles via Mail Mint's role manager face greater risk. No public exploit identified at time of analysis; no KEV or EPSS data was provided.