Sensitive Data Exposure Vulnerability in WP Mailster by Brandtoss
CVE-2025-22303

7.5HIGH

Key Information:

Vendor
WordPress
Status
WP Mailster
Vendor
CVE Published:
7 January 2025

Summary

The WP Mailster plugin by Brandtoss contains a vulnerability that allows attackers to retrieve sensitive data embedded within sent emails. This flaw impacts versions up to 1.8.17.0, posing a significant risk of unintentional data disclosure to unauthorized individuals. Users of the WP Mailster plugin should take immediate action to upgrade their software to mitigate the risks associated with this vulnerability.

Affected Version(s)

WP Mailster <= 1.8.17.0

References

https://patchstack.com/database/wordpress/plugin/wp-mails...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dhabaleshwar Das (Patchstack Alliance)
.