WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mail-picker
Published
2024-11-28
Title
Mail Picker <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mail-picker
Published
2024-12-11
Title
Mail Picker < 1.0.15 - Unauthenticated PHP Object Injection
Slug
mail-subscribe-list
Published
2014-08-01
Title
Mail Subscribe List < 2.1 - Stored XSS
Slug
mail-subscribe-list
Published
2022-05-26
Title
Mail Subscribe List < 2.1.4 - Arbitrary Subscribed User Deletion via CSRF
Slug
mail-subscribe-list
Published
2023-04-20
Title
Mail Subscribe List < 2.1.10 - Contributor+ Stored XSS
Slug
mail-subscribe-list
Published
2025-09-22
Title
Mail Subscribe List <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mailarchiver
Published
2023-07-12
Title
MailArchiver < 2.11.0 - Unauthenticated Stored XSS
Slug
mailarchiver
Published
2026-02-26
Title
MailArchiver < 4.5.1 - Authenticated (Admininistrator+) SQL Injection via 'logid' Parameter
Slug
mailarchiver
Published
2026-03-06
Title
MailArchiver < 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings
Slug
mailchimp
Published
2026-02-18
Title
Mailchimp List Subscribe Form < 2.0.1 - Cross-Site Request Forgery to Mailchimp List Change
Slug
mailchimp-for-woocommerce
Published
2022-08-03
Title
MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF
Slug
mailchimp-for-woocommerce
Published
2022-08-03
Title
MailChimp for Woocommerce < 2.7.2 - Admin+ SSRF
Slug
mailchimp-for-woocommerce
Published
2026-08-12
Title
Mailchimp for WooCommerce < 6.2 - Authenticated (Administrator+) SQL Injection
Slug
mailchimp-for-woocommerce
Published
2026-09-17
Title
Mailchimp for WooCommerce < 6.1.1 - Unauthenticated Broken Access Control in REST API
Slug
mailchimp-for-woocommerce
Published
2026-09-25
Title
Mailchimp for WooCommerce < 6.3 - Unauthenticated Customer Email and Cart Disclosure via IDOR
Slug
mailchimp-for-woocommerce
Published
2026-10-01
Title
Mailchimp for WooCommerce < 6.3 - Unauthenticated Abandoned Cart Modification and Deletion
Slug
mailchimp-for-wp
Published
2016-12-09
Title
MailChimp for WordPress <= 4.0.10 - Authenticated Cross-Site Scripting (XSS)
Slug
mailchimp-for-wp
Published
2017-09-08
Title
MailChimp for WordPress <= 4.1.6 - Authenticated Cross-Site Scripting (XSS)
Slug
mailchimp-for-wp
Published
2017-09-08
Title
Mailchimp For WP < 4.1.8 - XSS
Slug
mailchimp-for-wp
Published
2021-06-01
Title
MC4WP: Mailchimp for WordPress < 4.8.5 - Authenticated Arbitrary Redirect
Slug
mailchimp-for-wp
Published
2021-06-01
Title
MC4WP: Mailchimp for WordPress < 4.8.5 - Unauthorised Actions via CSRF
Slug
mailchimp-for-wp
Published
2022-03-02
Title
MC4WP < 4.8.7 - Admin+ Stored Cross-Site Scripting
Slug
mailchimp-for-wp
Published
2022-03-02
Title
MC4WP < 4.8.7 - Admin+ Stored Cross-Site Scripting
Slug
mailchimp-for-wp
Published
2023-12-27
Title
MC4WP < 4.9.10 - Unauthenticated Unpublished Form Preview
Slug
mailchimp-for-wp
Published
2024-09-18
Title
MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting