CVE-2026-27064

CriticalCVSS 9.1

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Summary

The Mailster plugin versions up to 4.1.17 allow an editor to upload arbitrary files. A user with the editor role can upload a malicious file to the server.

Risk Assessment

Risk of executing malicious code on the server, leading to site takeover.

Recommendation

Update the Mailster plugin to the latest version.

Original NVD description (English source)

Editor Arbitrary File Upload in Mailster <= 4.1.17 versions.