Plugin icon

Connect Contact Form 7 to Mailchimp, Brevo, MailerLite & Klaviyo

contact-form-7-mailchimp-extension

Vulnerabilities:

4

Last Updated:

October 8, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2026-07-08
Title
Connect Contact Form 7 and Mailchimp < 0.9.78.07 - Unauthenticated Stored Cross-Site Scripting via Mailchimp Merge Field Values
Fixed in
Fixed in 0.9.78.07
CVSS
7.2 (high)
Published
2025-12-21
Title
Contact Form 7 Extension For Mailchimp < 0.9.69 - Authenticated (Contributor+) Information Exposure
Fixed in
Fixed in 0.9.69
CVSS
4.3 (medium)
Published
2024-04-26
Title
Contact Form 7 Extension For Mailchimp < 0.9.19 - Cross-Site Request Forgery
Fixed in
Fixed in 0.9.19
CVSS
4.3 (medium)
Published
2024-01-08
Title
Contact Form 7 Extension For Mailchimp < 0.9.19 - Subscriber+ Server-Side Request Forgery
Fixed in
Fixed in 0.9.19
CVSS
5.4 (medium)