TI-2026-21524 CVE-2026-27064 · GHSA-qwf2-rfq8-mpjg
WordPress Mailster plugin <= 4.1.17 - Arbitrary File Upload vulnerability
Priority MEDIUM 42
Editor Arbitrary File Upload in Mailster <= 4.1.17 versions.
EverPress
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
EverPress records in CISA KEVNo EverPress vulnerabilities are listed in CISA KEV.
Records
4 records
TI-2024-21410 CVE-2024-32523 · GHSA-56vf-fgp4-xjqj
WordPress Mailster plugin <= 4.0.6 - Unauthenticated Local File Inclusion vulnerability
Priority LOW 39
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through <= 4.0.6.
TI-2025-39646 CVE-2025-64203 · GHSA-39f9-v6jc-j4qf
WordPress Mailster plugin < 4.1.14 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress Mailster mailster allows Reflected XSS.This issue affects Mailster: from n/a through < 4.1.14.
TI-2025-26150 CVE-2025-39408 · GHSA-j573-m2h6-qq2m
WordPress BruteGuard – Brute Force Login Protection plugin <= 0.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress BruteGuard – Brute Force Login Protection bruteguard allows Reflected XSS.This issue affects BruteGuard – Br…