179 matches found
CVE-2024-53804
CVE-2024-53804 affects the WordPress WP Mailster plugin (brands Toss) up to version 1.8.16.0. Description: Insertion of Sensitive Information Into Sent Data can allow retrieval of embedded sensitive data, exposing Confidentiality. Affected software: WP Mailster (WordPress), versions
CVE-2024-53805 WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through = 1.8.16.0...
CVE-2024-53805 WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in brandtoss WP Mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.8.16.0...
CVE-2024-53805
CVE-2024-53805 is a WP Mailster vulnerability described as a Missing Authorization / Broken Access Control issue affecting WP Mailster 1.8.16.0 and earlier. External access could exploit incorrectly configured access control; multiple sources classify it as high risk (Wordfence listing and CVSS/m...
WordPress plugin WP Mailster 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-35919 · Brandtoss · Wp Mailster
Name of the Vulnerable Software and Affected Versions: WP Mailster versions 1.8.16.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in brandtoss WP Mailster, which allows exploiting incorrectly configured access control security levels. Recommendations: For...
WordPress plugin WP Mailster SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
PT-2024-35917 · Brandtoss · Wp Mailster
Name of the Vulnerable Software and Affected Versions: WP Mailster versions 1.8.16.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in brandtoss WP Mailster, which allows exploiting incorrectly configured access control security levels. Recommendations: For...
WordPress plugin WP Mailster 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress plugin WP Mailster 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-35918
Name of the Vulnerable Software and Affected Versions WP Mailster versions 1.8.16.0 and earlier Description The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. This can potentially expose confidential information. Recommendations...
CVE-2024-11782
The WP Mailster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mstsubscribe' shortcode in all versions up to, and including, 1.8.17.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2024-11782 WP Mailster <= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The WP Mailster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mstsubscribe' shortcode in all versions up to, and including, 1.8.17.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2024-11782 WP Mailster <= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The WP Mailster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mstsubscribe' shortcode in all versions up to, and including, 1.8.17.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
WordPress plugin WP Mailster 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
PT-2024-17254 · WordPress · Wp Mailster
Name of the Vulnerable Software and Affected Versions: WP Mailster plugin for WordPress versions up to, and including, 1.8.17.0 Description: The issue is related to stored cross-site scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the mst...
WordPress WP Mailster plugin <= 1.8.16.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Lam Que Chi Patchstack Alliance in WordPress Plugin WP Mailster versions = 1.8.16.0...
WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WP Mailster versions = 1.8.16.0...
WordPress WP Mailster plugin <= 1.8.16.0 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WP Mailster versions = 1.8.16.0...
WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WP Mailster versions = 1.8.16.0...