WordPress Plugin Vulnerabilities

Easy Forms for MailChimp < 6.1 - Local File Inclusion (LFI)

Description

The Easy Forms for Mailchimp WordPress plugin was affected by a Local File Inclusion (LFI) security vulnerability.

Affects Plugins

Plugin icon
yikes-inc-easy-mailchimp-extender
Fixed in 6.1

References

URL
https://sumofpwn.nl/advisory/2016/easy_forms_for_mailchimp_local_file_inclusion_vulnerability.html

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
901a2a48-85b9-4c23-9d81-ec046b41e2c3

Timeline

Publicly Published
2016-07-13 (about 9 years ago)
Added
2016-07-13 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2024-04-22
Title
Sendinblue for WooCommerce < 4.0.18 - Authenticated (Editor+) Arbitrary File Download and Deletion
Published
2026-03-23
Title
YML for Yandex Market < 5.3.0 - Authenticated (Shop Manager+) Arbitrary File Deletion
Published
2024-08-19
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion
Published
2025-04-23
Title
WPMasterToolKit (WPMTK) – All in one plugin < 2.6.0 - Authenticated (Administrator+) to Arbitrary File Read and Write
Published
2024-12-30
Title
WPMasterToolKit < 1.14.0 - Authenticated (Admin+) Arbitrary File Download