The Mail Mage WordPress plugin fails to properly sanitize and escape a user-supplied value used in a SQL statement, allowing an unauthenticated attacker to inject SQL code. This flaw enables data disclosure or alteration in the site database, potentially exposing sensitive information. The weakness is a classic insecure input handling problem (CWE-89).

The vulnerability affects the Mail Mage WordPress plugin versions through 0.0.25, including all earlier releases, regardless of the WordPress host environment. The product is identified as Mail Mage by the CNA.

Attackers can trigger the flaw by sending a crafted request that includes the vulnerable ‘ewp_unsubscribe’ parameter, without the need for authentication. While no EPSS score exists, the lack of authentication requirement means the exploitation probability is non-negligible. The vulnerability is not listed in the CISA KEV catalog as of the latest data, but its severity remains high due to the potential for arbitrary database manipulation.