WP Mailster
WP Mailster has 13 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2025; all 13 are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2024 was the busiest year with 10 disclosures.
The most common weakness is Cross-Site Scripting, behind 6 of the records (46%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Missing Authorization.
Every one of the 13 issues recorded for WP Mailster has a vendor fix available, so running the current release closes all known holes.
8 independent researchers contributed these findings, most of them (4) reported by Kévin Mosbahi (Mika). WP Mailster is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2024-53807WP Mailster <= 1.8.16.0 - Authenticated (Contributor+) SQL Injection via orderby
Read the full analysisVulnerability Records

WP Mailster
Author
brandtoss
True two-way group communication over email WP Mailster allows your users to be part of a group and communicate by email without having to log into a website. Similar to programs like Mailman or Listserv this plugin allows you to run a discussion mailing list. That means that every email sent to a central email address is forwarded to the rest of the members of the list. When members reply to such list emails WP Mailster again forwards them to the other list recipients. Unlike newsletter plugins this allows true two-way communication via email. Features group communication through email usable with any POP3/IMAP email account recipients can be managed in the WordPress admin area users can subscribe/unsubscribe through widgets on the website all WP users can be chosen as recipients, additional recipients can be stored (without having to create them as WP users) users can be organized in groups single users or whole groups can be added as recipients of a mailing list replies to mailing list messages can be forwarded to all recipients (or only the sender) email archive for browsing the mails full support of HTML emails and attachments custom headers and footers subject prefixes many more features Note: This version of WP Mailster is FREE and limited in terms of number of lists and subscribers per list. Additional features such as captcha protection, double opt-in, email filtering, configurable event notifications, and many others are available in the premium editions. Help & Support Please check the documentation on our site as well as look through the FAQs before contacting us. Thank you! Special Thanks This plugin has been tested on various browsers thanks to BrowserStack!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C