WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails

The easiest email marketing automation plugin for WordPress & WooCommerce - capture leads, send email campaigns, and automate your newsletters.

12Reported vulnerabilities
9.8Highest CVSS score
1.30.1Latest version
5,000+Active installs

What to do now

Update Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails to 1.31.1 or later. 12 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 7, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2026-10196 Critical 9.8 0.6% 0 to 1.31.0 (inclusive) 1.31.1 September 5, 2026
CVE-2025-11967 High 7.2 0.5% 0 to 1.18.10 (inclusive) 1.18.11 November 8, 2025
CVE-2026-2025 Medium 5.3 1.4% Before 1.19.5 1.19.5 March 5, 2026
CVE-2026-23541 Medium 5.3 0.3% 1.19.4 and earlier 1.19.5 February 18, 2026
CVE-2026-1447 Medium 5.4 0.2% 0 to 1.19.2 (inclusive) 1.19.3 February 3, 2026
CVE-2025-47541 Medium 5.3 0.5% 1.17.7 and earlier 1.17.8 May 7, 2025
CVE-2026-12918 Medium 4.9 0.5% 0 to 1.24.1 (inclusive) 1.24.2 July 10, 2026
CVE-2026-14342 Medium 4.9 0.4% 0 to 1.24.2 (inclusive) 1.24.3 July 9, 2026
CVE-2026-1258 Medium 4.9 0.4% 0 to 1.19.2 (inclusive) 1.19.3 February 14, 2026
CVE-2025-59570 Medium 4.9 0.4% 1.18.6 and earlier 1.18.7 September 22, 2025
CVE-2025-58604 Medium 4.9 0.4% 1.18.5 and earlier 1.18.6 September 3, 2025
CVE-2026-27349 Medium 4.3 0.2% 1.19.5 and earlier 1.20.0 May 21, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.