brandtoss WP Mailster vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Latest brandtoss WP Mailster vulnerabilities

CVE-2025-24688 — WordPress WP Mailster Plugin <= 1.8.20.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
CVE-2025-24567 — WordPress WP Mailster plugin <= 1.8.16.0 - Sensitive Data Exposure vulnerability (CVSS 6.5)
CVE-2025-24598 — WordPress WP Mailster plugin <= 1.8.17.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
CVE-2025-24559 — WordPress WP Mailster plugin <= 1.8.15.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
CVE-2025-22303 — WordPress WP Mailster plugin <= 1.8.17.0 - Sensitive Data Exposure vulnerability (CVSS 7.5)
CVE-2024-54355 — WordPress WP Mailster plugin <= 1.8.17.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
CVE-2024-53807 — WordPress WP Mailster plugin <= 1.8.16.0 - SQL Injection vulnerability (CVSS 9.8)
CVE-2024-53805 — WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability (CVSS 9.8)
CVE-2024-53804 — WordPress WP Mailster plugin <= 1.8.16.0 - Sensitive Data Exposure vulnerability (CVSS 7.5)
CVE-2024-53803 — WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability (CVSS 8.8)
CVE-2024-11782 — WP Mailster <= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
CVE-2024-53737 — WordPress WP Mailster plugin <= 1.8.16.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2021-28975 — (CVSS 6.1)
CVE-2017-17451 — (CVSS 6.1)