Mail-masta Project Mail-masta — known CVE vulnerabilities

Every CVE whose affected-product data names Mail-masta Project Mail-masta, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2017-6095 — CVSS 9.8 (critical): A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php…
• CVE-2016-10956 — CVSS 7.5 (high): The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.
• CVE-2017-6097 — CVSS 7.2 (high): A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/campaign/count_of_send.p…
• CVE-2017-6098 — CVSS 7.2 (high): A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/campaign_save.php…
• CVE-2017-6570 — CVSS 7.2 (high): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This…
• CVE-2017-6571 — CVSS 7.2 (high): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This…
• CVE-2017-6572 — CVSS 7.2 (high): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This…
• CVE-2017-6573 — CVSS 7.2 (high): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This…
• CVE-2017-6574 — CVSS 7.2 (high): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This…
• CVE-2017-6575 — CVSS 7.2 (high): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This…
• CVE-2017-6576 — CVSS 7.2 (high): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This…
• CVE-2017-6577 — CVSS 7.2 (high): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This…
• CVE-2017-6578 — CVSS 7.2 (high): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This…
• CVE-2017-6096 — CVSS 7.2 (high): A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lists/view-list.php…