WordPress - Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails - CRITICAL - CVE-2026-10196. The Mail Mint plugin for WordPress is susceptible to PHP Object Injection due to improper handling of user inputs in the 'handle_form_submission' function. This vulnerability permits unauthenticated attackers to manipulate the deserialization process, enabling them to inject malicious PHP objects. Furthermore, the presence of a chain of PHP Object Patterns (POP) can result in code execution on the server side, making this issue quite severe for users relying on this email marketing solution.