CVE-2026-12918 | getwpfunnels Mail Mint Plugin up to 1.24.1 on WordPress Campaigns /mrm/v1/campaigns array_column recipients sql injection

July 10, 2026 Yanac

A vulnerability was found in getwpfunnels Mail Mint Plugin up to 1.24.1 on WordPress and classified as problematic. This issue affects the function array_column of the file /mrm/v1/campaigns of the component Campaigns. Executing a manipulation of the argument recipients can lead to sql injection.

This vulnerability appears as CVE-2026-12918. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More