Live › vulnerability › CVE-2026-111829
Go to dashboardThe WP Mailster WordPress plugin builds a PHP include or require path from input it does not control properly. An attacker can make the plugin load a local file, which can expose server files and may run code if the attacker can place or reach a suitable file.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the WP Mailster WordPress plugin at version or older are exposed. The sources do not say which plugin features or request paths reach the vulnerable include, so sites that do not use the plugin can skip it.
1.9.1.0No product ranges from the sources yet.
wp-mailster).1.9.1.0 or older.1.9.1.0; the fixed version is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Mailster WP Mailster wp-mailster allows PHP Local File Inclusion.This issue affects WP Mailster: from n/a through 1.9.1.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-111829")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.