WordPress Plugin Vulnerabilities

Mailchimp for WooCommerce < 6.1.1 - Unauthenticated Broken Access Control in REST API

Description

The plugin does not verify that the requesting user holds the required capability in the permission callback for several of its REST API routes, allowing unauthenticated users to reach administrator-oriented endpoints and trigger a persistent state change.

Proof of Concept

Affects Plugins

Plugin icon
mailchimp-for-woocommerce
Fixed in 6.1.1

References

CVE
CVE-2026-92435

Classification

Type
NO AUTHORISATION
OWASP top 10
A5: Broken Access Control
CWE
CWE-862
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Pablo González and Francisco José Ramírez
Submitter
Pablo González and Francisco José Ramírez
Verified
Yes
WPVDB ID
4b3f9c83-8986-40d9-ab1a-848550ea7882

Timeline

Publicly Published
2026-09-17 (about 2 days ago)
Added
2026-09-17 (about 1 day ago)
Last Updated
2026-09-17 (about 1 day ago)

Other

Published
Title
Published
2025-12-11
Title
Modalier for Elementor <= 1.0.6 - Missing Authorization
Published
2026-08-17
Title
Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui
Published
2026-08-15
Title
ShortPixel Adaptive Images < 3.11.6 - Missing Authorization to Authenticated (Subscriber+) Third-Party Plugin Option Modification via 'causer' Parameter
Published
2026-09-10
Title
Booktics – Appointment Booking Calendar for Service Businesses < 1.0.25 - Missing Authorization
Published
2026-06-30
Title
Motors < 1.4.112 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'stm_mark_as_sold_car' Parameter