CriticalCVSS 9.1
EPSS 0.50%
Editor Arbitrary File Upload in Mailster <= 4.1.17 versions.
Vendor
EverPress vulnerabilities
6 published CVES affecting EverPress, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 6
- Critical
- 1
- High
- 3
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest EverPress CVEs
Newest publication first
-
-
CVE-2025-64203 WordPress Mailster plugin < 4.1.14 - Cross Site Scripting (XSS) vulnerability
PublishedHighCVSS 7.1 EPSS 0.22%Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress Mailster mailster allows Reflected XSS.This issue affects Mailster: from n/a through < 4.1.14.
-
HighCVSS 7.1 EPSS 0.29%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress BruteGuard – Brute Force Login Protection bruteguard allows Reflected XSS.This issue affects BruteGuard – Brute Force Login Protection: from n/a through <= 0.1.4.
-
MediumCVSS 6.1 EPSS 0.27%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through <= 4.0.9.
-
HighCVSS 8.1 EPSS 1.8%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through <= 4.0.6.
-
MediumCVSS 6.1 EPSS 0.43%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through <= 4.0.6.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.