Mail Mage CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Mail Mage CVE published 2026-11-06

CVE-2026-110532

The Mail Mage WordPress plugin through 0.0.25 does not properly sanitise and escape a user-supplied value before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks. This vulnerability affects WordPress installations with the Mail Mage plugin version 0.0.25 or earlier, potentially leading to data breaches or other malicious activities. Defenders should verify e [truncated]