{"id":"CVE-2026-110532","title":"Mail Mage <= 0.0.25 - Unauthenticated SQLi via 'ewp_unsubscribe' Parameter","summary":"The Mail Mage WordPress plugin through 0.0.25 does not properly sanitise and escape a user-supplied value before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.","severity":"high","cvss":8.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvssSource":"adp","cwe":["CWE-89"],"product":"Mail Mage","affected":["mail_mage <= 0.0.25"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-11-06T11:49:22.404826Z"},"published":"2026-11-06","updated":"2026-11-06","sourceUpdated":"2026-11-06T12:02:07.321Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110532","references":[{"url":"https://wpscan.com/vulnerability/86a2c9d4-5567-41b9-9cb5-21acf815f992/"}],"tags":["cve.org"],"ingestedAt":"2026-11-06T06:46:27.284Z","epss":0.00324,"epssPercentile":0.25614,"slug":"CVE-2026-110532","body":"## Overview\n\nThe Mail Mage WordPress plugin through 0.0.25 does not properly sanitise and escape a user-supplied value before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.\n\n## Affected\n\n- `mail_mage <= 0.0.25`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":47.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":235106,"id":"CVE-2026-110532","ts":1793969520022,"field":"cvss","old":null,"new":"8.6"},{"seq":235105,"id":"CVE-2026-110532","ts":1793969520022,"field":"severity","old":"none","new":"high"}]}