Known vulnerabilities in WP Mailster

WP Mailster allows your users to be part of a group and communicate by email without having to log into a website.

13Reported vulnerabilities

8.8Highest CVSS score

1.8.23.0Latest version

300+Active installs

What to do now

Update WP Mailster to 1.8.21.0 or later. 13 of these have a fixed version available. Updating resolves them.

Plugin last updated: March 20, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-53807	High 8.8	0.5%	1.8.16.0 and earlier	`1.8.17.0`	December 2, 2024
CVE-2017-17451	Medium 6.1	5.1%	Before 1.5.5	`1.5.5`	December 7, 2017
CVE-2024-53805	High 7.5	0.6%	1.8.16.0 and earlier	`1.8.17.0`	December 2, 2024
CVE-2024-53803	Medium 6.5	0.5%	1.8.16.0 and earlier	`1.8.17.0`	December 2, 2024
CVE-2024-53737	Medium 6.4	0.3%	1.8.16.0 and earlier	`1.8.17.0`	November 23, 2024
CVE-2025-24688	Medium 6.1	0.3%	1.8.20.0 and earlier	`1.8.21.0`	January 28, 2025
CVE-2025-24598	Medium 6.1	0.3%	1.8.17.0 and earlier	`1.8.18.0`	December 22, 2024
CVE-2025-24559	Medium 6.1	0.3%	1.8.15.0 and earlier	`1.8.16.0`	November 23, 2024
CVE-2024-11782	Medium 5.4	0.3%	Before 1.8.18	`1.8.18`	December 3, 2024
CVE-2024-53804	Medium 5.3	0.6%	1.8.16.0 and earlier	`1.8.17.0`	December 2, 2024
CVE-2025-22303	Medium 5.3	0.4%	1.8.17.0 and earlier	`1.8.18.0`	January 6, 2025
CVE-2025-24567	Medium 5.3	0.4%	1.8.16.0 and earlier	`1.8.17.0`	December 7, 2024
CVE-2024-54355	Medium 4.3	0.3%	1.8.17.0 and earlier	`1.8.18.0`	December 11, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.