WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mailarchiver
Published
2026-03-06
Title
MailArchiver < 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings
Slug
mailchimp
Published
2026-02-18
Title
Mailchimp List Subscribe Form < 2.0.1 - Cross-Site Request Forgery to Mailchimp List Change
Slug
mailchimp-for-woocommerce
Published
2022-08-03
Title
MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF
Slug
mailchimp-for-woocommerce
Published
2022-08-03
Title
MailChimp for Woocommerce < 2.7.2 - Admin+ SSRF
Slug
mailchimp-for-wp
Published
2016-12-09
Title
MailChimp for WordPress <= 4.0.10 - Authenticated Cross-Site Scripting (XSS)
Slug
mailchimp-for-wp
Published
2017-09-08
Title
MailChimp for WordPress <= 4.1.6 - Authenticated Cross-Site Scripting (XSS)
Slug
mailchimp-for-wp
Published
2017-09-08
Title
Mailchimp For WP < 4.1.8 - XSS
Slug
mailchimp-for-wp
Published
2021-06-01
Title
MC4WP: Mailchimp for WordPress < 4.8.5 - Authenticated Arbitrary Redirect
Slug
mailchimp-for-wp
Published
2021-06-01
Title
MC4WP: Mailchimp for WordPress < 4.8.5 - Unauthorised Actions via CSRF
Slug
mailchimp-for-wp
Published
2022-03-02
Title
MC4WP < 4.8.7 - Admin+ Stored Cross-Site Scripting
Slug
mailchimp-for-wp
Published
2022-03-02
Title
MC4WP < 4.8.7 - Admin+ Stored Cross-Site Scripting
Slug
mailchimp-for-wp
Published
2023-12-27
Title
MC4WP < 4.9.10 - Unauthenticated Unpublished Form Preview
Slug
mailchimp-for-wp
Published
2024-09-18
Title
MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting
Slug
mailchimp-for-wp
Published
2024-09-20
Title
MailChimp for Wordpress < 4.9.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
mailchimp-for-wp
Published
2026-03-10
Title
MC4WP: Mailchimp for WordPress < 4.12.0 - Unauthenticated Arbitrary Subscription Deletion
Slug
mailchimp-forms-by-mailmunch
Published
2023-10-16
Title
MailChimp Forms by MailMunch < 3.1.5 - Arbitrary Actions via CSRF
Slug
mailchimp-forms-by-mailmunch
Published
2024-03-25
Title
MailChimp Forms by MailMunch < 3.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
mailchimp-forms-by-mailmunch
Published
2024-04-10
Title
MailChimp Forms by MailMunch < 3.2.2 - Cross-Site Request Forgery
Slug
mailchimp-forms-by-mailmunch
Published
2024-11-19
Title
MailChimp Forms by MailMunch < 3.2.4 - Reflected Cross-Site Scripting
Slug
mailchimp-subscribe-sm
Published
2015-04-21
Title
MailChimp Subscribe Form <= 1.1 - Email Field Remote PHP Code Execution
Slug
mailchimp-subscribe-sm
Published
2023-05-22
Title
MailChimp Subscribe Forms < 4.0.9.2 - Admin+ Stored XSS
Slug
mailchimp-subscribe-sm
Published
2024-08-09
Title
MailChimp Subscribe Forms < 4.0.9.8 - Editor+ Stored XSS
Slug
mailchimp-subscribe-sm
Published
2025-01-15
Title
MailChimp Subscribe Forms < 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mailchimp-top-bar
Published
2024-10-01
Title
MC4WP: Mailchimp Top Bar < 1.6.1 - Reflected Cross-Site Scripting
Slug
mailchimp-wp
Published
2023-11-07
Title
Forms for Mailchimp by Optin Cat < 2.5.5 - Authenticated (Editor+) Stored Cross-Site Scripting