Plugin icon

MC4WP: Mailchimp for WordPress

mailchimp-for-wp

Vulnerabilities:

11

Last Updated:

March 26, 2026

Active Installs:

1000000

Published
Title
Fixed in
CVSS
Published
2026-03-10
Title
MC4WP: Mailchimp for WordPress < 4.12.0 - Unauthenticated Arbitrary Subscription Deletion
Fixed in
Fixed in 4.12.0
CVSS
6.5 (medium)
Published
2024-09-20
Title
MailChimp for Wordpress < 4.9.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.9.17
CVSS
3.3 (low)
Published
2024-09-18
Title
MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.9.17
CVSS
7.1 (high)
Published
2023-12-27
Title
MC4WP < 4.9.10 - Unauthenticated Unpublished Form Preview
Fixed in
Fixed in 4.9.10
CVSS
5.3 (medium)
Published
2022-03-02
Title
MC4WP < 4.8.7 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.8.7
CVSS
3.4 (low)
Published
2022-03-02
Title
MC4WP < 4.8.7 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.8.7
CVSS
3.4 (low)
Published
2021-06-01
Title
MC4WP: Mailchimp for WordPress < 4.8.5 - Unauthorised Actions via CSRF
Fixed in
Fixed in 4.8.5
CVSS
4.3 (medium)
Published
2021-06-01
Title
MC4WP: Mailchimp for WordPress < 4.8.5 - Authenticated Arbitrary Redirect
Fixed in
Fixed in 4.8.5
CVSS
4.3 (medium)
Published
2017-09-08
Title
Mailchimp For WP < 4.1.8 - XSS
Fixed in
Fixed in 4.1.8
CVSS
6.1 (medium)
Published
2017-09-08
Title
MailChimp for WordPress <= 4.1.6 - Authenticated Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.1.7
CVSS
n/a
Published
2016-12-09
Title
MailChimp for WordPress <= 4.0.10 - Authenticated Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.0.11
CVSS
6.1 (medium)