PT-2025-39045 · Wpfunnels · Wpfunnels Mail Mint

CVE-2025-59570 · Published 2025-09-22 · Updated 2025-09-22

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions WPFunnels Mail Mint versions through 1.18.6

Description A flaw exists in WPFunnels Mail Mint that allows for SQL Injection. The issue is due to improper neutralization of special elements within SQL commands. This could potentially allow an attacker to manipulate database queries.

Recommendations Update WPFunnels Mail Mint to a version later than 1.18.6.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-59570

Affected Products

Wpfunnels Mail Mint

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-59570 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/mail-mint/vulnerability/wordpress-mail-mint-plugin-1-18-6-sql-injection-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/mail-mint/vulnerability/wordpress-mail-mint-plugin-1-18-6-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1970198148120207609 · Twitter Post