CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-23541

WordPress Mail Mint plugin <= 1.19.4 - Broken Access Control vulnerability

Status: Published
Published: 2026-02-19
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mail Mint: from n/a through <= 1.19.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WPFunnels Mail Mint

Default version status: unaffected

0 to ≤ 1.19.4affected

References

https://patchstack.com/database/Wordpress/Plugin/mail-mint/vulnerability/wordpress-mail-mint-plugin-1-19-4-broken-access-control-vulnerability?_s_id=cve ↗