Skip to content
OpenAdvisories

Vendor

Brandtoss

13 known vulnerabilities.

Products

WP Mailster 12 WP Admin Audit 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-105062

    WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17.

    Brandtoss WP Admin Audit
  • Medium 6.5
    CVE-2025-24567

    WordPress WP Mailster plugin <= 1.8.16.0 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in brandtoss WP Mailster wp-mailster allows Retrieve Embedded Sensitive Data.This issue affects WP Mailster: from n/a through <= 1.8.16.0.

    Brandtoss WP Mailster
  • Medium 5.3
    CVE-2025-22303

    WordPress WP Mailster plugin <= 1.8.17.0 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in brandtoss WP Mailster wp-mailster allows Retrieve Embedded Sensitive Data.This issue affects WP Mailster: from n/a through <= 1.8.17.0.

    Brandtoss WP Mailster
  • Medium 4.3
    CVE-2024-54355

    WordPress WP Mailster plugin <= 1.8.17.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in brandtoss WP Mailster wp-mailster allows Cross Site Request Forgery.This issue affects WP Mailster: from n/a through <= 1.8.17.0.

    Brandtoss WP Mailster
  • Medium 6.5
    CVE-2024-53803

    WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through <= 1.8.16.0.

    Brandtoss WP Mailster
  • Medium 6.4
    CVE-2024-11782

    WP Mailster <= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The WP Mailster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mst_subscribe' shortcode in all versions up to, and including, 1.8.17.0 due to insufficient input sanitization and output escaping on user supplied attributes.…

    Brandtoss WP Mailster Web / CMS
  • Medium 6.5
    CVE-2024-53737

    WordPress WP Mailster plugin <= 1.8.16.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandtoss WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through <= 1.8.16.0.

    Brandtoss WP Mailster