CVE-2026-110532

UNKNOWN 0.0

Mail Mage <= 0.0.25 - Unauthenticated SQLi via 'ewp_unsubscribe' Parameter

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Mail Mage WordPress plugin through 0.0.25 does not properly sanitise and escape a user-supplied value before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.

Vendor	unknown
Product	mail mage
Published	Nov 6, 2026

Stay Ahead of the Next One

Get instant alerts for unknown mail mage

Be the first to know when new unknown vulnerabilities affecting unknown mail mage are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Mail Mage

0 ≤ 0.0.25

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/86a2c9d4-5567-41b9-9cb5-21acf815f992/

Credits

Erwan LR (WPScan) WPScan