CVE-2025-47541

{
  "etk_id": "ETK-2026-4303",
  "cve_id": "CVE-2025-47541",
  "display_id": "CVE-2025-47541",
  "ghsa_id": "GHSA-qwmp-5m8m-pjvf",
  "euvd_id": "EUVD-2025-28095",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Sensitive information exposure in WPFunnels Mail Mint",
  "summary": "Mail Mint versions through 1.17.7 may expose sensitive information contained in data it sends. An unauthenticated remote attacker may be able to obtain that information when the affected functionality is reachable over the network.",
  "mitigation": "Restrict network access to Mail Mint functionality to trusted users and networks until a vendor remediation is applied. Upgrade to a vendor-provided release newer than 1.17.7 after confirming it addresses this issue.",
  "vendor": "WPFunnels",
  "product": "Mail Mint",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 1.17.7"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "mail-mint",
      "purl": null
    }
  ],
  "cwes": [
    201
  ],
  "cvss_score": 7.5,
  "cvss_src": "nvd",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "upstream",
  "exploit": false,
  "pipeline_minutes": 0.013858866666666667,
  "t0_at": "2025-05-23T12:43:30.943000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-12T18:44:31.174286+00:00",
      "days": 538.2506971213658,
      "is_lower_bound": false,
      "measured_at": "2025-05-23T12:43:30.943000+00:00",
      "url": null
    },
    "kev": {
      "at": "2026-11-12T00:00:00+00:00",
      "days": 538,
      "is_lower_bound": false,
      "measured_at": "2025-05-23T12:43:30.943000+00:00",
      "precision": "day",
      "url": "https://vulncheck.com/cve/CVE-2025-47541"
    },
    "trigger_signal": {
      "at": "2026-11-12T00:00:00+00:00",
      "days": 537.4697807523148,
      "is_lower_bound": false,
      "measured_at": "2025-05-23T12:43:30.943000+00:00",
      "url": "https://vulncheck.com/cve/CVE-2025-47541"
    }
  }
}