Unauthorized Access in WPFunnels Mail Mint

Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Unauthorized Access in WPFunnels Mail Mint

CVE-2026-23541

Summary

A security weakness in WPFunnels Mail Mint could allow unauthorized users to access features they shouldn't. This affects Mail Mint versions up to 1.19.4. To stay secure, update to the latest version of Mail Mint.

Original title

Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mail Mint: from n/a through <= 1.19.4.

Original description

Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mail Mint: from n/a through <= 1.19.4.

Vulnerability type

CWE-862 Missing Authorization

https://patchstack.com/database/Wordpress/Plugin/mail-mint/vulnerability/wordpre...

Published: 19 Feb 2026 · Updated: 11 Mar 2026 · First seen: 6 Mar 2026