CVE-2026-111832

LOWCVSS 10.0 · CRITICAL

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This issue affects WP Mailster: from n/a through 1.9.1.0.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/wordpress/plugin/wp-mailster/vulnerability/wordpress-wp-mailster-plugin-1-9-1-0-arbitrary-file-upload-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-434

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

SecAlerts@SecAlertsCo15h
🐚 Web shell upload confirmed. CVE-2026-111832 in WP Mailster <=1.9.1.0 is a CVSS 10 unauth file upload flaw letting attackers plant shells on your server. Update immediately. #cybersecurity #ciso #wordpress #vulnerabilities #mssp https://secalerts.co/vulnerability/CVE-2026-111832?utm_campaign=x https://t.co/OtLnwPzjzD
0001039
895 followersView on X

Explore more

Back to dashboard