WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mailchimp-subscribe-sm
Published
2023-05-22
Title
MailChimp Subscribe Forms < 4.0.9.2 - Admin+ Stored XSS
Slug
mailchimp-subscribe-sm
Published
2024-08-09
Title
MailChimp Subscribe Forms < 4.0.9.8 - Editor+ Stored XSS
Slug
mailchimp-subscribe-sm
Published
2025-01-15
Title
MailChimp Subscribe Forms < 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mailchimp-top-bar
Published
2024-10-01
Title
MC4WP: Mailchimp Top Bar < 1.6.1 - Reflected Cross-Site Scripting
Slug
mailchimp-wp
Published
2023-11-07
Title
Forms for Mailchimp by Optin Cat < 2.5.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
mailchimp-wp
Published
2024-10-11
Title
Forms for Mailchimp by Optin Cat < 2.5.8 - Authenticated (Editor+) Stored Cross-Site Scripting via Form Color Parameters
Slug
mailchimp-wp
Published
2024-10-25
Title
Forms for Mailchimp by Optin Cat – Grow Your MailChimp List < 2.5.8 - Reflected Cross-Site Scripting
Slug
mailclient
Published
2025-01-16
Title
Free MailClient FMC <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
mailcwp
Published
2015-07-10
Title
MailCWP 1.100 - Unauthenticated Arbitrary File Upload
Slug
mailercloud-integrate-webforms-synchronize-contacts
Published
2026-03-02
Title
Mailercloud – Integrate webforms and synchronize website contacts < 1.0.8 - Missing Authorization
Slug
mailerpress
Published
2026-02-13
Title
MailerPress < 1.5.0 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
mailerpress
Published
2026-06-08
Title
MailerPress < 2.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via Campaign HTML Content Field
Slug
mailerpress
Published
2026-07-08
Title
MailerPress < 2.0.3 - Contributor+ Privilege Escalation
Slug
mailersend-official-smtp-integration
Published
2026-06-29
Title
MailerSend - Official SMTP Integration < 1.0.8 - Settings Deletion and Plugin Deactivation via CSRF
Slug
mailgun
Published
2026-07-13
Title
Mailgun for WordPress < 2.2.1 - Unauthenticated Arbitrary Mailgun List Subscription via add_list AJAX
Slug
mailgun-subscriptions
Published
2025-12-11
Title
Mailgun Subscriptions < 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mailhawk
Published
2025-04-09
Title
WordPress SMTP Service, Email Delivery Solved! — MailHawk < 1.3.2 - Unauthenticated Local File Inclusion
Slug
mailin
Published
2021-12-23
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.25 - Reflected XSS
Slug
mailin
Published
2022-01-12
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site Scripting
Slug
mailin
Published
2023-05-15
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS
Slug
mailin
Published
2024-03-22
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo < 3.1.78 - Reflected XSS
Slug
mailin
Published
2024-06-03
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.78 - Reflected Cross-Site Scripting
Slug
mailin
Published
2024-08-16
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.83 - Cross-Site Request Forgery
Slug
mailin
Published
2024-10-09
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) < 3.1.88 - Cross-Site Request Forgery
Slug
mailin
Published
2026-02-17
Title
Brevo < 3.3.1 - Unauthenticated Authorization Bypass via Type Juggling