{"affected":[{"defaultStatus":"unknown","product":"Mail Mage","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThanOrEqual":"0.0.25","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-110532","cwes":["CWE-89"],"description":"The Mail Mage WordPress plugin through 0.0.25 does not properly sanitise and escape a user-supplied value before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/86a2c9d4-5567-41b9-9cb5-21acf815f992/"}],"kev":null,"metrics":[],"modifiedAt":1793944824558,"publishedAt":1793944824558,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/86a2c9d4-5567-41b9-9cb5-21acf815f992/"}],"remediation":[],"revision":"6b6e19f10a646856630e57d951d371699aca69df7bb9badd3c8a401e2823ceb7","sources":[{"modifiedAt":1793944824558,"name":"CNA: WPScan","retrievedAt":1793945306870,"url":"https://www.cve.org/CVERecord?id=CVE-2026-110532"}],"ssvc":null,"status":"published","title":"Mail Mage <= 0.0.25 - Unauthenticated SQLi via 'ewp_unsubscribe' Parameter","updatedAt":1793945306870}