Vulnerabilities

TI-2025-18315 CVE-2025-24598 · GHSA-q5rj-7wqp-rf58

WordPress WP Mailster plugin <= 1.8.17.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandtoss WP Mailster wp-mailster allows Reflected XSS.This issue affects WP Mailster: from n/a through <= 1.8.17.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-02-04 No fix listed CWE-79

TI-2025-18276 CVE-2025-24559 · GHSA-q2rj-w884-9q82

WordPress WP Mailster plugin <= 1.8.15.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandtoss WP Mailster wp-mailster allows Reflected XSS.This issue affects WP Mailster: from n/a through <= 1.8.15.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00317 Published 2025-02-03 No fix listed CWE-79

TI-2025-16207 CVE-2025-22303 · GHSA-8646-v3mf-m963

WordPress WP Mailster plugin <= 1.8.17.0 - Sensitive Data Exposure vulnerability

LOW 39

Insertion of Sensitive Information Into Sent Data vulnerability in brandtoss WP Mailster wp-mailster allows Retrieve Embedded Sensitive Data.This issue affects WP Mailster: from n/a through <= 1.8.17.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00446 Published 2025-01-07 No fix listed CWE-201

TI-2024-36443 CVE-2024-54355 · GHSA-vcp9-mrmm-2gh8

WordPress WP Mailster plugin <= 1.8.17.0 - Cross Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in brandtoss WP Mailster wp-mailster allows Cross Site Request Forgery.This issue affects WP Mailster: from n/a through <= 1.8.17.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00277 Published 2024-12-16 No fix listed CWE-352

TI-2024-36001 CVE-2024-53803 · GHSA-4jvf-xwmx-r87h

WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through <= 1.8.16.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00514 Published 2024-12-06 No fix listed CWE-862

TI-2024-36005 CVE-2024-53807 · GHSA-3xg5-7p4x-v3wx

WordPress WP Mailster plugin <= 1.8.16.0 - SQL Injection vulnerability

MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in brandtoss WP Mailster wp-mailster allows Blind SQL Injection.This issue affects WP Mailster: from n/a through <= 1.8.1…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00473 Published 2024-12-06 No fix listed CWE-89

TI-2024-36002 CVE-2024-53804 · GHSA-54rh-52xj-qhxm

WordPress WP Mailster plugin <= 1.8.16.0 - Sensitive Data Exposure vulnerability

MEDIUM 40

Insertion of Sensitive Information Into Sent Data vulnerability in brandtoss WP Mailster wp-mailster allows Retrieve Embedded Sensitive Data.This issue affects WP Mailster: from n/a through <= 1.8.16.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00585 Published 2024-12-06 No fix listed CWE-201

TI-2024-36003 CVE-2024-53805 · GHSA-fggw-qcx2-vr8w

WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability

HIGH 81

Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through <= 1.8.16.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00581 Published 2024-12-06 No fix listed CWE-862

TI-2024-10926 CVE-2024-11782 · GHSA-8r8p-6qcr-pv6h

WP Mailster <= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The WP Mailster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mst_subscribe' shortcode in all versions up to, and including, 1.8.17.0 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00296 Published 2024-12-03 No fix listed CWE-79

TI-2024-35935 CVE-2024-53737 · GHSA-gf56-v3wh-8qvf

WordPress WP Mailster plugin <= 1.8.16.0 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandtoss WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through <= 1.8.16.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00317 Published 2024-11-28 No fix listed CWE-79

TI-2021-09899 CVE-2021-28975 · GHSA-2rqf-fc8m-jwgp

WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the…

LOW 29

WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers page, for a crafted server_host, server_name, or connection_parameter parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00895 Published 2021-10-21 No fix listed CWE-79

TI-2017-12749 CVE-2017-17451 · GHSA-28jr-36gh-qwvh

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via…

LOW 35

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.05088 Published 2017-12-07 No fix listed CWE-79

Vulnerabilities

Filters