Show filters
14 Total Results
Displaying 1-10 of 14
Sort by:
Attacker Value
Unknown

CVE-2025-24688

Disclosure Date: February 14, 2025 (last updated February 15, 2025)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandtoss WP Mailster allows Reflected XSS. This issue affects WP Mailster: from n/a through 1.8.20.0.
0
Attacker Value
Unknown

CVE-2025-24567

Disclosure Date: February 14, 2025 (last updated February 15, 2025)
Insertion of Sensitive Information Into Sent Data vulnerability in brandtoss WP Mailster allows Retrieve Embedded Sensitive Data. This issue affects WP Mailster: from n/a through 1.8.16.0.
0
Attacker Value
Unknown

CVE-2025-24598

Disclosure Date: February 04, 2025 (last updated February 12, 2025)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandtoss WP Mailster allows Reflected XSS. This issue affects WP Mailster: from n/a through 1.8.17.0.
Attacker Value
Unknown

CVE-2025-24559

Disclosure Date: February 03, 2025 (last updated February 12, 2025)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandtoss WP Mailster allows Reflected XSS. This issue affects WP Mailster: from n/a through 1.8.15.0.
Attacker Value
Unknown

CVE-2025-22303

Disclosure Date: January 07, 2025 (last updated February 12, 2025)
Insertion of Sensitive Information Into Sent Data vulnerability in brandtoss WP Mailster allows Retrieve Embedded Sensitive Data.This issue affects WP Mailster: from n/a through 1.8.17.0.
Attacker Value
Unknown

CVE-2024-54355

Disclosure Date: December 16, 2024 (last updated February 08, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in brandtoss WP Mailster allows Cross Site Request Forgery.This issue affects WP Mailster: from n/a through 1.8.17.0.
Attacker Value
Unknown

CVE-2024-53807

Disclosure Date: December 06, 2024 (last updated February 08, 2025)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in brandtoss WP Mailster allows Blind SQL Injection.This issue affects WP Mailster: from n/a through 1.8.16.0.
Attacker Value
Unknown

CVE-2024-53805

Disclosure Date: December 06, 2024 (last updated February 12, 2025)
Missing Authorization vulnerability in brandtoss WP Mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.8.16.0.
Attacker Value
Unknown

CVE-2024-53804

Disclosure Date: December 06, 2024 (last updated February 12, 2025)
Insertion of Sensitive Information Into Sent Data vulnerability in brandtoss WP Mailster allows Retrieve Embedded Sensitive Data.This issue affects WP Mailster: from n/a through 1.8.16.0.
Attacker Value
Unknown

CVE-2024-53803

Disclosure Date: December 06, 2024 (last updated February 11, 2025)
Missing Authorization vulnerability in brandtoss WP Mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.8.16.0.