CVE-2026-105061

Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions.

Credits

L4m | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/wp-mailster/vulnerability/wordpress-wp-mailster-plugin-1-9-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve