Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This… (CVE-2026-111832)
Description
A critical vulnerability (CVE-2026-111832) exists in WP Mailster up to version 1.9.1.0 that allows unrestricted upload of files with dangerous types, including web shells, to a web server. This vulnerability enables remote attackers to execute arbitrary code with full system privileges without any authentication or user interaction.
CVSS v3.1
Score 10.0critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in WP Mailster (up to 1.9.1.0) is an unrestricted file upload flaw (CWE-434) that permits attackers to upload malicious files such as web shells to the web server. This leads to complete compromise of confidentiality, integrity, and availability of the affected system. The CVSS 3.1 base score is 10.0, reflecting network attack vector, no required privileges or user interaction, and critical impact on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation allows remote attackers to upload and execute arbitrary code on the affected server, resulting in full system compromise including data theft, system manipulation, and denial of service.
Mitigation Recommendations
No patch or official fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict file upload permissions and consider disabling the WP Mailster plugin if possible to mitigate risk.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-2hrr-86cg-w5v9
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-111832"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 3.1
Threat ID: 6ad91ccf4d27ba8daafaa1f2
Added to database: 10/21/2026, 20:13:03 UTC
Last enriched: 10/21/2026, 20:19:22 UTC
Last updated: 10/21/2026, 20:55:24 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.