Mail Masta

Mail Masta has 14 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2017; none of them are fixed as of September 2026. Their average CVSS score is 7.6, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 12 high. 2017 was the busiest year with 13 disclosures.

The most common weakness is SQL Injection, behind 13 of the records (93%). Other recurring categories include PHP Remote File Inclusion.

None of the 14 issues recorded for Mail Masta have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2016.

3 independent researchers contributed these findings, most of them (11) reported by Hanley Shun.

Strategic Overview

Avg CVSSHigh

7.6/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Mail Masta vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2017-6095

Mail Masta <= 1.0 - SQL Injection via list_id parameter

Read the full analysis

Vulnerability Records

14 records


2017-03-09 00:00	Mail Masta <= 1.0 - SQL Injection via subscriber_email parameter Mail Masta <= 1.0	`CVE-2017-6578`	7.2 High	hamkovic	No
2017-03-05 00:00	Mail Masta <= 1.0 - SQL Injection via id parameter Mail Masta <= 1.0	`CVE-2017-6576`	7.2 High	Hanley Shun	No
2017-03-05 00:00	Mail Masta Plugin <= 1.0 - SQL Injection via filter_list Mail Masta <= 1.0	`CVE-2017-6574`	7.2 High	hamkovic	No
2017-02-18 00:00	Mail Masta <= 1.0 - SQL Injection via list_id parameter Mail Masta <= 1.0	`CVE-2017-6098`	7.2 High	Hanley Shun	No
2017-02-18 00:00	Mail Masta <= 1.0 - SQL Injection via id parameter Mail Masta <= 1.0	`CVE-2017-6570`	7.2 High	Hanley Shun	No
2017-02-18 00:00	Mail Masta <= 1.0 - SQL Injection via filter_list parameter Mail Masta <= 1.0	`CVE-2017-6096`	7.2 High	Hanley Shun	No
2017-02-18 00:00	Mail Masta <= 1.0 - SQL Injection via camp_id parameter Mail Masta <= 1.0	`CVE-2017-6097`	7.2 High	Hanley Shun	No
2017-02-18 00:00	Mail Masta <= 1.0 - SQL Injection via id parameter Mail Masta <= 1.0	`CVE-2017-6571`	7.2 High	Hanley Shun	No
2017-02-18 00:00	Mail Masta <= 1.0 - SQL Injection via id parameter Mail Masta <= 1.0	`CVE-2017-6573`	7.2 High	Hanley Shun	No
2017-02-18 00:00	Mail Masta <= 1.0 - SQL Injection via list_id parameter Mail Masta <= 1.0	`CVE-2017-6095`	9.8 Critical	Hanley Shun	No

Showing 1–10 of 14 reports