EverPress Vulnerabilities and Affected Products

Open in search

Vulnerabilities associated with Mailster.

Products

Clear product

Showing 5 vulnerabilities on this page for Mailster

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

WordPress Mailster plugin <= 4.1.17 - Arbitrary File Upload vulnerability

Editor Arbitrary File Upload in Mailster <= 4.1.17 versions.

CWE-434Jul 23, 2026
CVSS9.1v3.1EPSS0.278%PoCs0SignalsSTIX

WordPress Mailster plugin < 4.1.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress Mailster mailster allows Reflected XSS.This issue affects Mailster: from n/a through < 4.1.14.

CWE-79Dec 18, 2025
CVSS7.1v3.1EPSS0.191%PoCs0SignalsSTIX

WordPress Mailster plugin <= 4.0.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through <= 4.0.9.

CWE-79Jul 22, 2024
CVSS7.1v3.1EPSS0.274%PoCs0SignalsSTIX

WordPress Mailster plugin <= 4.0.6 - Unauthenticated Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through <= 4.0.6.

CWE-22CWE-98May 17, 2024
CVSS8.1v3.1EPSS1.75%PoCs0SignalsSTIX

WordPress Mailster plugin <= 4.0.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through <= 4.0.6.

CWE-79Mar 29, 2024
CVSS7.1v3.1EPSS0.426%PoCs0SignalsSTIX