VulnSocial

CVE-2026-10196Disclosure

LOWCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.31.0 via deserialization of untrusted input in the 'handle_form_submission' function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code on the server. The vulnerability was partially patched in version 1.23.1.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-502

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked at 3 mentions on most recent observed day (2026-09-06)
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-09-05: 1Mentions · 2026-09-06: 3PoC Mentioned / Linked · 2026-09-06: 1Patch / Workaround · 2026-09-06: 1Technical Details · 2026-09-05: 1Technical Details · 2026-09-06: 209-0509-06
Signal classification4 categories
Disclosure
125.0%
General
125.0%
Patch
125.0%
PoC
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-09-051
Disclosure1
2026-09-063
General1Patch1PoC1
Full discourse4 posts
  • ExploitGrid@exploitgrid
    General

    🛡️ ExploitGrid Daily Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-86152 CVE-2026-86218 CVE-2026-10196 CVE-2026-16310 CVE-2026-75816 ..🧵👇

    Post summary

    The digest simply enumerates CVE identifiers without supplementary details or context.

    1001069
    40 followersView on X
  • ExploitGrid@exploitgrid
    PoC

    [CVE] CVE-2026-10196 [HIGH PRIORITY] #Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form ... 🔗 https://exploitgrid.net/cve/CVE-2026-10196

    Post summary

    A high-priority vulnerability (CVE-2026-10196) affecting Mail Mint <= 1.31.0 involves unauthenticated PHP Object Injection, with a link provided that likely hosts a proof‑of‑concept on ExploitGrid, but no evidence of active exploitation, patch, or debunking.

    1000036
    40 followersView on X
  • ThreatAft@ThreatAft
    Patch

    🚨 CVE-2026-10196 (CVSS 9.8): Critical Mail Mint WordPress RCE via PHP object injection. ✅ Patch to 1.31.1 NOW 🔒 Disable forms if delayed 🔗 https://threataft.com/articles/mail-mint-wordpress-rce-php-object-injection-cve-2026-10196?utm_source=twitter&utm_medium=social&utm_campaign=share #WordPress #MailMint #CVE202610196 #RCE #infosec https://t.co/kfSRvOTSnw

    Post summary

    The tweet announcements a critical CVE for Mail Mint WordPress, details the vulnerability type, and explicitly provides a patch (1.31.1) along with a mitigation recommendation.

    0000056
    42 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-10196 The Mail Mint – Email Marketing, Newsletter, Email Automation &amp; WooCommerce Emails plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, a… https://www.cve.org/CVERecord?id=CVE-2026-10196

    Post summary

    The Mail Mint plugin for WordPress is disclosed to be vulnerable to PHP Object Injection across all earlier versions. No PoC, exploit, or mitigation details are provided.

    000001.4K
    58.1K followersView on X

Explore more

Back to dashboard