Browse CVEs

MEDIUM 6.1 CVE-2025-24598 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandtoss WP Mailster wp-mailster allows Reflec… Wp Mailster 1.8.18+ Fix from $1,6002025-02-04 MEDIUM 6.1 CVE-2025-24559 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandtoss WP Mailster wp-mailster allows Reflec… Wp Mailster 1.8.16+ Fix from $1,6002025-02-03 HIGH 7.5 CVE-2025-22303 Insertion of Sensitive Information Into Sent Data vulnerability in brandtoss WP Mailster wp-mailster allows Retrieve Embedded Sensitive Data.This iss… Wp Mailster 1.8.18+ Fix from $1,9502025-01-07 HIGH 8.8 CVE-2024-54355 Cross-Site Request Forgery (CSRF) vulnerability in brandtoss WP Mailster wp-mailster allows Cross Site Request Forgery.This issue affects WP Mailster… Wp Mailster 1.8.17+ Fix from $1,9502024-12-16 CRITICAL 9.8 CVE-2024-53807 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in brandtoss WP Mailster wp-mailster allows Blind … Wp Mailster 1.8.17+ Fix from $2,3002024-12-06 CRITICAL 9.8 CVE-2024-53805 Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This… Wp Mailster 1.8.17+ Fix from $2,3002024-12-06 HIGH 8.8 CVE-2024-53803 Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This… Wp Mailster 1.8.17+ Fix from $1,9502024-12-06 HIGH 7.5 CVE-2024-53804 Insertion of Sensitive Information Into Sent Data vulnerability in brandtoss WP Mailster wp-mailster allows Retrieve Embedded Sensitive Data.This iss… Wp Mailster 1.8.17+ Fix from $1,9502024-12-06 MEDIUM 5.4 CVE-2024-11782 The WP Mailster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mst_subscribe' shortcode in all versions up to, a… Wp Mailster 1.8.18+ Fix from $1,6002024-12-03 MEDIUM 5.4 CVE-2024-53737 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandtoss WP Mailster wp-mailster allows Stored… Wp Mailster 1.8.17+ Fix from $1,6002024-11-28 MEDIUM 6.1 CVE-2021-28975 WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers page, for a crafted server_host, server_name, or conne… Wp Mailster No fix yet Fix from $1,6002021-10-21 MEDIUM 6.1 CVE-2017-17451EPSS 5% The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php. Wp Mailster 1.5.5+ Fix from $1,6002017-12-07