CVE-2026-27349 — WPFunnels Team Mail Mint Vulnerability

title: CVE-2026-27349 - Mail Mint Embedded Data Retrieval Attempt
id: scw-2026-05-21-ai-1
status: experimental
level: medium
description: |
  This rule detects attempts to exploit CVE-2026-27349 by targeting the mail_mint_get_template_content AJAX action in Mail Mint. This action, when improperly handled, can lead to the retrieval of embedded sensitive data within email templates, which attackers can leverage for further compromise.
author: SCW Feed Engine (AI-generated)
date: 2026-05-21
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-27349/
tags:
  - attack.credential_access
  - attack.t1040
logsource:
    category: webserver
detection:
  selection:
      cs-uri|contains:
          - '/wp-content/plugins/mail-mint/includes/admin/ajax/mail-mint-ajax.php'
      cs-uri-query|contains:
          - 'action=mail_mint_get_template_content'
      condition: cs-uri AND cs-uri-query
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse