EverPress vulnerabilities

🔔 Create alert RSS

Published CVEs affecting EverPress products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-27064 Critical · 9.1 CWE-434 Jul 23, 2026

WordPress Mailster plugin <= 4.1.17 - Arbitrary File Upload vulnerability

Editor Arbitrary File Upload in Mailster <= 4.1.17 versions.

CVE-2025-64203 High · 7.1 CWE-79 Dec 18, 2025

WordPress Mailster plugin < 4.1.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress Mailster mailster allows Reflected XSS.This issue affects Mailster: from n/a through < 4.1.14.