Vulnerabilities / WP Mailster
WP Mailster vulnerabilities
Advisories WPSec published for WP Mailster. Other sources may list more. Its attack surface: WP Mailster on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-20 | WPSEC-2026-1272 | WP Mailster <= 1.9.1.0 - Unauthenticated Stored Cross-Site Scripting via Email Subject and Body | High 7.2 | 1.9.2.0 |
| 2026-10-20 | WPSEC-2026-1271 | WP Mailster <= 1.9.1.0 - Unauthenticated Arbitrary File Upload via Email Attachment Filename | Critical 9.8 | 1.9.2.0 |
| 2026-10-20 | WPSEC-2026-1270 | WP Mailster <= 1.9.1.0 - Authenticated (Contributor+) Arbitrary File Read via CSV Import | Medium 6.5 | 1.9.2.0 |
| 2026-10-04 | WPSEC-2026-0421 | WP Mailster <= 1.9.0.0 - Authenticated (Contributor+) Missing Authorization to Mail Server Settings Exposure and Modification | High 7.6 | 1.9.1.0 |
| 2026-10-04 | WPSEC-2026-0420 | WP Mailster <= 1.9.0.0 - Unauthenticated Stored Cross-Site Scripting via Subscriber Name | High 7.2 | 1.9.1.0 |
License: CC BY 4.0