CVE-2026-111829mediumCWE-98

CVE-2026-111829: falha de média gravidade em WP Mailster

WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerability

Publicada em

Seguir esta CVE+ Monitorar WP Mailster

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.3%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Mailster WP Mailster wp-mailster allows PHP Local File Inclusion.This issue affects WP Mailster: from n/a through 1.9.1.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
WP Mailster · WP Mailster
CVEs relacionadas — WP Mailster

No mesmo produto, das mais perigosas para as menos.

CVE-2026-111832CRITICALWordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2026-111830HIGHWordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-105055MEDIUMWordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerabilityEPSS 0.2%