wpmailster kayıtları
wpmailster üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %75
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-201 Insertion of Sensitive Information Into Sent Data2
- CWE-862 Missing Authorization2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-53805İstismar yok | WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerabilitywpmailster · wp mailster · CWE-862 | Kritik9,8 | — | %0,5 | 6 Ara 2024 |
39İzleyin | CVE-2024-53807İstismar yok | WordPress WP Mailster plugin <= 1.8.16.0 - SQL Injection vulnerabilitywpmailster · wp mailster · CWE-89 | Kritik9,8 | — | %0,4 | 6 Ara 2024 |
35İzleyin | CVE-2024-53803İstismar yok | WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerabilitywpmailster · wp mailster · CWE-862 | Yüksek8,8 | — | %0,5 | 6 Ara 2024 |
35İzleyin | CVE-2024-54355İstismar yok | WordPress WP Mailster plugin <= 1.8.17.0 - Cross Site Request Forgery (CSRF) vulnerabilitywpmailster · wp mailster · CWE-352 | Yüksek8,8 | — | %0,2 | 16 Ara 2024 |
30İzleyin | CVE-2024-53804İstismar yok | WordPress WP Mailster plugin <= 1.8.16.0 - Sensitive Data Exposure vulnerabilitywpmailster · wp mailster · CWE-201 | Yüksek7,5 | — | %0,5 | 6 Ara 2024 |
30İzleyin | CVE-2025-22303İstismar yok | WordPress WP Mailster plugin <= 1.8.17.0 - Sensitive Data Exposure vulnerabilitywpmailster · wp mailster · CWE-201 | Yüksek7,5 | — | %0,4 | 7 Oca 2025 |
26İzleyin | CVE-2017-17451Kavram kanıtı | The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2wpmailster · wp mailster · CWE-79 | Orta6,1 | — | %5,0 | 6 Ara 2017 |
24İzleyin | CVE-2021-28975İstismar yok | WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers page, for a crafted server_host, server_name,wpmailster · wp mailster · CWE-79 | Orta6,1 | — | %0,8 | 21 Eki 2021 |
24İzleyin | CVE-2025-24559İstismar yok | WordPress WP Mailster plugin <= 1.8.15.0 - Reflected Cross Site Scripting (XSS) vulnerabilitywpmailster · wp mailster · CWE-79 | Orta6,1 | — | %0,3 | 3 Şub 2025 |
24İzleyin | CVE-2025-24598İstismar yok | WordPress WP Mailster plugin <= 1.8.17.0 - Reflected Cross Site Scripting (XSS) vulnerabilitywpmailster · wp mailster · CWE-79 | Orta6,1 | — | %0,2 | 4 Şub 2025 |
21İzleyin | CVE-2024-53737İstismar yok | WordPress WP Mailster plugin <= 1.8.16.0 - Cross Site Scripting (XSS) vulnerabilitywpmailster · wp mailster · CWE-79 | Orta5,4 | — | %0,2 | 28 Kas 2024 |
21İzleyin | CVE-2024-11782İstismar yok | WP Mailster <= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpmailster · wp mailster · CWE-79 | Orta5,4 | — | %0,2 | 3 Ara 2024 |
- CVE-2024-5380539İzleyin
WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0wpmailster · wp mailster6 Ara 2024
- CVE-2024-5380739İzleyin
WordPress WP Mailster plugin <= 1.8.16.0 - SQL Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0wpmailster · wp mailster6 Ara 2024
- CVE-2024-5380335İzleyin
WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0wpmailster · wp mailster6 Ara 2024
- CVE-2024-5435535İzleyin
WordPress WP Mailster plugin <= 1.8.17.0 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0wpmailster · wp mailster16 Ara 2024
- CVE-2024-5380430İzleyin
WordPress WP Mailster plugin <= 1.8.16.0 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0wpmailster · wp mailster6 Ara 2024
- CVE-2025-2230330İzleyin
WordPress WP Mailster plugin <= 1.8.17.0 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0wpmailster · wp mailster7 Oca 2025
- CVE-2017-1745126İzleyin
The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2
OrtaCVSS 6,1Kavram kanıtıEPSS %5wpmailster · wp mailster6 Ara 2017
- CVE-2021-2897524İzleyin
WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers page, for a crafted server_host, server_name,
OrtaCVSS 6,1İstismar yokEPSS %0wpmailster · wp mailster21 Eki 2021
- CVE-2025-2455924İzleyin
WordPress WP Mailster plugin <= 1.8.15.0 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0wpmailster · wp mailster3 Şub 2025
- CVE-2025-2459824İzleyin
WordPress WP Mailster plugin <= 1.8.17.0 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0wpmailster · wp mailster4 Şub 2025
- CVE-2024-5373721İzleyin
WordPress WP Mailster plugin <= 1.8.16.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0wpmailster · wp mailster28 Kas 2024
- CVE-2024-1178221İzleyin
WP Mailster <= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0wpmailster · wp mailster3 Ara 2024