WordPress Mailster <=1.5.4 - Cross-Site Scripting

WordPress Mailster 1.5.4 and before contains a cross-site scripting vulnerability in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php. id: CVE-2017-17451 info: name: WordPress Mailster =1.5.5 which includes a fix for this vulnerability. reference: -...

CVE-2026-111830

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Mailster WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through 1.9.1.0...

CVE-2026-111830

The WP Mailster WordPress plugin (versions

CVE-2026-111830 WordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Mailster WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through 1.9.1.0...

EUVD-2026-108069

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Mailster WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through 1.9.1.0...

CVE-2026-111830 WordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Mailster WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through 1.9.1.0...

WordPress WP Mailster cross-site scripting vulnerability

WordPress WP Mailster versions 1.9.1.0 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to stored cross-site scripting attacks...

PT-2026-121301

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Mailster WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through 1.9.1.0...

CVE-2026-111832

Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This issue affects WP Mailster: from n/a through 1.9.1.0...

CVE-2026-111832

The WP Mailster WordPress plugin (versions

CVE-2026-111832 WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This issue affects WP Mailster: from n/a through 1.9.1.0...

EUVD-2026-107282

Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This issue affects WP Mailster: from n/a through 1.9.1.0...

PT-2026-120614

Name of the Vulnerable Software and Affected Versions WP Mailster versions prior to 1.9.1.1 Description An unrestricted file upload flaw allows an unauthenticated attacker to upload files of dangerous types, such as a web shell, to the web server. A web shell is a malicious script that allows...

WordPress WP Mailster arbitrary file upload vulnerability

WordPress WP Mailster versions 1.9.1.0 and earlier contain an arbitrary file upload vulnerability. This vulnerability stems from the lack of restrictions on uploading files of malicious types, potentially allowing attackers to upload web shells to the web server...

WordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin WP Mailster versions = 1.9.1.0...

CVE-2026-111829

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Mailster WP Mailster wp-mailster allows PHP Local File Inclusion.This issue affects WP Mailster: from n/a through 1.9.1.0...

WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Peter Tang in WordPress Plugin WP Mailster versions = 1.9.1.0...

EUVD-2026-104325

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Mailster WP Mailster wp-mailster allows PHP Local File Inclusion.This issue affects WP Mailster: from n/a through 1.9.1.0...

CVE-2026-111829

The WP Mailster WordPress plugin (versions

CVE-2026-111829 WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Mailster WP Mailster wp-mailster allows PHP Local File Inclusion.This issue affects WP Mailster: from n/a through 1.9.1.0...