Creative Mail vulnerabilities
We track 1 vulnerability in Creative Mail products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2026.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest Creative Mail vulnerabilities
- 8.6 High severity
Creative Mail: Improper Neutralization of Special Elements used in an SQL Command
The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL injection when the abandoned cart email is managed by creative mail.