https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:33:51.398255+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-3430 CVE-2026-3430 — Creative Mail 1.6.5 - 1.6.9 - Unauthenticated SQLi 2026-10-08T06:33:51.399350+00:00

Affected: Unknown Creative Mail

The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL injection when the abandoned cart email is managed by creative mail.