EverPress vulnerabilities and threats

5 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.1	EPSS 0.5%	CVE-2026-27064Mailster (WordPress plugin) · Unrestricted File Upload Critical9.1EPSS 0.5%2026-07-23CVE Database V5CVE-2026-27064 Editor Arbitrary File Upload in Mailster <= 4.1.17 versions. EPSS 0.5%Vulnerability EverPress CWE-434	CVE Database V5	2026-07-23
High	7.1	EPSS 0.2%	CVE-2025-64203Mailster (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-12-18CVE Database V5CVE-2025-64203 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress Mailster mailster allows Reflected XSS.This issue affects Mailster: from n/a through < 4.1.14. EPSS 0.2%Vulnerability EverPress	CVE Database V5	2025-12-18
High	7.1	EPSS 0.3%	CVE-2024-37433Mailster (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2024-07-22CVE Database V5CVE-2024-37433 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through <= 4.0.9. EPSS 0.3%Vulnerability EverPress	CVE Database V5	2024-07-22
High	8.1	EPSS 1.8%	CVE-2024-32523Mailster (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 1.8%2024-05-17CVE Database V5CVE-2024-32523 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through <= 4.0.6. EPSS 1.8%Vulnerability EverPress	CVE Database V5	2024-05-17
High	7.1	EPSS 0.4%	CVE-2024-30503Mailster (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.4%2024-03-29CVE Database V5CVE-2024-30503 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through <= 4.0.6. EPSS 0.4%Vulnerability EverPress	CVE Database V5	2024-03-29

Page 1 of 1