---
id: CVE-2026-110532
title: Mail Mage <= 0.0.25 - Unauthenticated SQLi via 'ewp_unsubscribe' Parameter
summary: >-
  The Mail Mage WordPress plugin through 0.0.25 does not properly sanitise and
  escape a user-supplied value before using it in a SQL statement, allowing
  unauthenticated attackers to perform SQL injection attacks.
severity: high
cvss: 8.6
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N'
cvssSource: adp
cwe:
  - CWE-89
product: Mail Mage
affected:
  - mail_mage <= 0.0.25
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-11-06T11:49:22.404826Z'
published: '2026-11-06'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T12:02:07.321Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-110532'
references:
  - url: 'https://wpscan.com/vulnerability/86a2c9d4-5567-41b9-9cb5-21acf815f992/'
tags:
  - cve.org
ingestedAt: '2026-11-06T06:46:27.284Z'
epss: 0.00324
epssPercentile: 0.25614
---

## Overview

The Mail Mage WordPress plugin through 0.0.25 does not properly sanitise and escape a user-supplied value before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.

## Affected

- `mail_mage <= 0.0.25`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.