WP Mailster has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was October 2026 with 4. The median CVSS is 6.8 (medium), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.8
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Worst active — by depth score
CVE-2026-111832Critical· 10.0WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability55CVE-2026-111830High· 7.1WordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerability39CVE-2026-111829Medium· 6.5WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerability36CVE-2026-105055Medium· 5.3Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0.29
WP Mailster vulnerabilities
CVEs affecting WP Mailster, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-111830High· 7.1WordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Mailster WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through 1.9.1.0.
CVE-2026-111832Critical· 10.0WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This issue affects WP Mailster: from n/a through 1.9.1.0.
CVE-2026-111829Medium· 6.5WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Mailster WP Mailster wp-mailster allows PHP Local File Inclusion.This issue affects WP Mailster: from n/a through…
CVE-2026-105055Medium· 5.3Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0.
Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0.