https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2016-10956.htmlhttps://patchthecve.com/cve/CVE-2016-10956.htmlWed, 17 Jun 2026 00:40:41 +0000HIGH 7.5: The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.https://patchthecve.com/cve/CVE-2017-6578.htmlhttps://patchthecve.com/cve/CVE-2017-6578.htmlWed, 17 Jun 2026 01:22:36 +0000HIGH 7.2: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/subscriber_list.php with the POST Parameter: subscriber_email.https://patchthecve.com/cve/CVE-2017-6577.htmlhttps://patchthecve.com/cve/CVE-2017-6577.htmlWed, 17 Jun 2026 01:22:35 +0000HIGH 7.2: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/subscriber_list.php with the POST Parameter: list_id.https://patchthecve.com/cve/CVE-2017-6576.htmlhttps://patchthecve.com/cve/CVE-2017-6576.htmlWed, 17 Jun 2026 01:22:35 +0000HIGH 7.2: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/campaign-delete.php with the GET Parameter: id.https://patchthecve.com/cve/CVE-2017-6575.htmlhttps://patchthecve.com/cve/CVE-2017-6575.htmlWed, 17 Jun 2026 01:22:35 +0000HIGH 7.2: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit_member.php with the GET Parameter: member_id.https://patchthecve.com/cve/CVE-2017-6574.htmlhttps://patchthecve.com/cve/CVE-2017-6574.htmlWed, 17 Jun 2026 01:22:35 +0000HIGH 7.2: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit_member.php with the GET Parameter: filter_list.https://patchthecve.com/cve/CVE-2017-6573.htmlhttps://patchthecve.com/cve/CVE-2017-6573.htmlWed, 17 Jun 2026 01:22:35 +0000HIGH 7.2: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit-list.php with the GET Parameter: id.https://patchthecve.com/cve/CVE-2017-6572.htmlhttps://patchthecve.com/cve/CVE-2017-6572.htmlWed, 17 Jun 2026 01:22:35 +0000HIGH 7.2: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/add_member.php with the GET Parameter: filter_list.https://patchthecve.com/cve/CVE-2017-6571.htmlhttps://patchthecve.com/cve/CVE-2017-6571.htmlWed, 17 Jun 2026 01:22:35 +0000HIGH 7.2: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the GET Parameter: id.https://patchthecve.com/cve/CVE-2017-6570.htmlhttps://patchthecve.com/cve/CVE-2017-6570.htmlWed, 17 Jun 2026 01:22:35 +0000HIGH 7.2: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign-list.php with the GET Parameter: id.https://patchthecve.com/cve/CVE-2017-6098.htmlhttps://patchthecve.com/cve/CVE-2017-6098.htmlWed, 17 Jun 2026 01:21:47 +0000HIGH 7.2: A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/campaign_save.php (Requires authentication to Wordpress admin) with the POST Parameter: list_id.https://patchthecve.com/cve/CVE-2017-6097.htmlhttps://patchthecve.com/cve/CVE-2017-6097.htmlWed, 17 Jun 2026 01:21:47 +0000HIGH 7.2: A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/campaign/count_of_send.php (Requires authentication to Wordpress admin) with the POST Parameter: camp_id.https://patchthecve.com/cve/CVE-2017-6096.htmlhttps://patchthecve.com/cve/CVE-2017-6096.htmlWed, 17 Jun 2026 01:21:47 +0000HIGH 7.2: A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lists/view-list.php (Requires authentication to Wordpress admin) with the GET Parameter: filter_list.https://patchthecve.com/cve/CVE-2017-6095.htmlhttps://patchthecve.com/cve/CVE-2017-6095.htmlWed, 17 Jun 2026 01:21:46 +0000CRITICAL 9.8: A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php (Unauthenticated) with the GET Parameter: list_id.