https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 10:23:06 +0000 https://db.gcve.eu/vuln/cve-2026-111106 <p><strong>Affected:</strong> getwpfunnels Mail Mint – Email Marketing, Automation &amp; WooCommerce Emails with AI Assistance</p> <p>The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the &#39;filters&#39; parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter &#39;value&#39; before it is appended to a SQL query in SegmentFilterService::get_meta_join_query() at line 797, where the value is string-interpolated into the WHERE fragment in a numeric (unquoted) context and the surrounding $wpdb-&gt;prepare() calls do not cover the injected value. This makes it possible for authenticated attackers, with the custom &#39;mint_read_contacts&#39; capability (granted to Administrators by default, and configurable to lower roles via the plugin&#39;s role manager), to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</p> <p><strong>Affected:</strong> getwpfunnels Mail Mint – Email Marketing, Automation &amp; WooCommerce Emails with AI Assistance</p> <p>The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the &#39;filters&#39; parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter &#39;value&#39; before it is appended to a SQL query in SegmentFilterService::get_meta_join_query() at line 797, where the value is string-interpolated into the WHERE fragment in a numeric (unquoted) context and the surrounding $wpdb-&gt;prepare() calls do not cover the injected value. This makes it possible for authenticated attackers, with the custom &#39;mint_read_contacts&#39; capability (granted to Administrators by default, and configurable to lower roles via the plugin&#39;s role manager), to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</p> https://db.gcve.eu/vuln/cve-2026-111106