CVE-2026-111832criticalCWE-434

CVE-2026-111832: falha crítica em WP Mailster

WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability

Publicada em

Seguir esta CVE+ Monitorar WP Mailster

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 10epss 0.4%
Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This issue affects WP Mailster: from n/a through 1.9.1.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
WP Mailster · WP Mailster
CVEs relacionadas — WP Mailster

No mesmo produto, das mais perigosas para as menos.

CVE-2026-111829MEDIUMWordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2026-111830HIGHWordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-105055MEDIUMWordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerabilityEPSS 0.2%