CVE-2026-57626
Received Received - Intake

Cross-Site Request Forgery in MailPoet

Publication date: 2026-07-23

Last updated on: 2026-07-23

Assigner: Patchstack

Description
Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery. This issue affects MailPoet: from 5.30.0 through 5.33.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-23
Last Modified
2026-07-23
Generated
2026-07-23
AI Q&A
2026-07-23
EPSS Evaluated
N/A
NVD
CVE-2026-57626
EUVD
EUVD-2026-48248

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mailpoet mailpoet From 5.30.0 (inc) to 5.33.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Cross-Site Request Forgery (CSRF) vulnerability in the MailPoet WordPress plugin affecting versions 5.30.0 through 5.33.0. It allows attackers to trick higher privileged users into executing unwanted actions during their active session by exploiting improper security controls in the plugin's authentication mechanism.

Detection Guidance

Detection involves checking the installed MailPoet plugin version. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin directory for version files. Look for versions between 5.30.0 and 5.33.0.

Impact Analysis

An attacker could force you or another user with higher privileges to perform actions without your consent, such as changing settings or sending emails. This requires you to interact with a malicious link or form, but could lead to unauthorized changes or data exposure in your MailPoet installation.

Mitigation Strategies

Update MailPoet to version 5.33.1 or later immediately. If updating is not possible, seek assistance from a hosting provider or web developer. Enable auto-updates for vulnerable plugins if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57626. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart