CVE Field Guide
About Us
CVE-2026-81783
PUBLISHED
WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability
Assigner:
Patchstack
Reserved:
27.08.2026
Published:
10.09.2026
Updated:
10.09.2026
Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 versions.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS Score:
7.1
CVSS score
7.1
Attack Vector
Network
Scope
Unchanged
Attack Complexity
Low
Confidentiality Impact
None
Privileges Required
Low
Integrity Impact
Low
User Interaction
None
Availability Impact
High
CVSS 3.1
Product Status
Vendor
mailmunch
Product
MailMunch – Grow your Email List
Versions
Default:
unaffected
affected from n/a to 3.2.5 (incl.)
Credits
Jakub Herman | Patchstack Bug Bounty Program
finder
References
https://patchstack.com/database/wordpress/plugin/mailmunch/vulnerability/wordpress-mailmunch-grow-your-email-list-plugin-3-2-5-broken-authentication-vulnerability?_s_id=cve
Problem Types
CWE-288 Authentication Bypass Using an Alternate Path or Channel
CWE
Impacts
CAPEC-50 Password Recovery Exploitation