CVE-2026-111832: WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This issue affects WP Mailster: from n/a through 1.9.1.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress WP Mailster (wp-mailster)to a version that resolves this vulnerability.Fixed in 1.9.2.0
Event History
Frequently Asked Questions
Who can exploit this issue?
The supplied vector indicates network-reachable exploitation with no privileges or user interaction required. An unauthenticated remote attacker may be able to exploit an affected installation.
What is the potential impact?
The issue allows upload of dangerous file types, including a web shell, to the web server. The supplied impact vector indicates high confidentiality, integrity, and availability impact, with scope changed.
Which versions are affected?
WP Mailster versions through 1.9.1.0 are affected. The provided data does not identify a fixed version.