SQL Injection Vulnerability in Mail Mage Plugin by WordPress
CVE-2026-110532
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-110532?
The Mail Mage WordPress plugin, up to version 0.0.25, is susceptible to SQL injection attacks due to inadequate sanitization and escaping of user-supplied inputs. This flaw can allow unauthorized attackers to manipulate SQL queries, potentially leading to unauthorized data access or manipulation. It is crucial for users of this plugin to implement security measures or upgrades to mitigate the risk of exploitation.
Affected Version(s)
Mail Mage 0 <= 0.0.25
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.