WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mail-mint
Published
2025-05-07
Title
Mail Mint < 1.17.8 - Unauthenticated Sensitive Information Exposure
Slug
mail-mint
Published
2025-09-03
Title
Mail Mint < 1.18.6 - Authenticated (Administrator+) SQL Injection
Slug
mail-mint
Published
2025-09-22
Title
Mail Mint < 1.18.7 - Authenticated (Administrator+) SQL Injection
Slug
mail-mint
Published
2025-11-07
Title
Mail Mint < 1.18.11 - Authenticated (Admin+) Arbitrary File Upload
Slug
mail-mint
Published
2026-02-02
Title
Mail Mint < 1.19.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
mail-mint
Published
2026-02-11
Title
Mail Mint < 1.19.5 - Unauthenticated Emails Disclosure
Slug
mail-mint
Published
2026-02-13
Title
Mail Mint < 1.19.3 - Authenticated (Administrator+) SQL Injection via Multiple API Endpoints
Slug
mail-mint
Published
2026-02-18
Title
Mail Mint < 1.19.5 - Missing Authorization
Slug
mail-on-update
Published
2014-08-01
Title
Mail On Update 5.1.0 - Email Option Manipulation CSRF
Slug
mail-picker
Published
2024-11-28
Title
Mail Picker <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mail-picker
Published
2024-12-11
Title
Mail Picker < 1.0.15 - Unauthenticated PHP Object Injection
Slug
mail-subscribe-list
Published
2014-08-01
Title
Mail Subscribe List < 2.1 - Stored XSS
Slug
mail-subscribe-list
Published
2022-05-26
Title
Mail Subscribe List < 2.1.4 - Arbitrary Subscribed User Deletion via CSRF
Slug
mail-subscribe-list
Published
2023-04-20
Title
Mail Subscribe List < 2.1.10 - Contributor+ Stored XSS
Slug
mail-subscribe-list
Published
2025-09-22
Title
Mail Subscribe List <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mailarchiver
Published
2023-07-12
Title
MailArchiver < 2.11.0 - Unauthenticated Stored XSS
Slug
mailchimp
Published
2026-02-18
Title
Mailchimp List Subscribe Form < 2.0.1 - Cross-Site Request Forgery to Mailchimp List Change
Slug
mailchimp-for-woocommerce
Published
2022-08-03
Title
MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF
Slug
mailchimp-for-woocommerce
Published
2022-08-03
Title
MailChimp for Woocommerce < 2.7.2 - Admin+ SSRF
Slug
mailchimp-for-wp
Published
2016-12-09
Title
MailChimp for WordPress <= 4.0.10 - Authenticated Cross-Site Scripting (XSS)
Slug
mailchimp-for-wp
Published
2017-09-08
Title
MailChimp for WordPress <= 4.1.6 - Authenticated Cross-Site Scripting (XSS)
Slug
mailchimp-for-wp
Published
2017-09-08
Title
Mailchimp For WP < 4.1.8 - XSS
Slug
mailchimp-for-wp
Published
2021-06-01
Title
MC4WP: Mailchimp for WordPress < 4.8.5 - Authenticated Arbitrary Redirect
Slug
mailchimp-for-wp
Published
2021-06-01
Title
MC4WP: Mailchimp for WordPress < 4.8.5 - Unauthorised Actions via CSRF
Slug
mailchimp-for-wp
Published
2022-03-02
Title
MC4WP < 4.8.7 - Admin+ Stored Cross-Site Scripting