WordPress Plugin Vulnerabilities

Easy Forms for Mailchimp < 6.6.3 - Authenticated Cross-Site Scripting (XSS)

Description

The Easy Forms for Mailchimp WordPress plugin was affected by an Authenticated Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
yikes-inc-easy-mailchimp-extender
Fixed in 6.6.3

References

URL
https://plugins.trac.wordpress.org/changeset/2251513/yikes-inc-easy-mailchimp-extender

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
be870758-caec-4e7d-92b4-571bf9275d6d

Timeline

Publicly Published
2020-02-26 (about 6 years ago)
Added
2020-03-28 (about 6 years ago)
Last Updated
2020-03-29 (about 6 years ago)

Other

Published
Title
Published
2024-12-09
Title
Property Hive Mortgage Calculator < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter
Published
2025-08-04
Title
Download Counter < 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via name Parameter
Published
2024-12-19
Title
Embed PDF Viewer < 2.4.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Published
2016-04-28
Title
Simple Photo Gallery <= 1.8.0 - Stored Cross-Site Scripting (XSS)
Published
2024-05-03
Title
Webpushr < 4.36.0 - Reflected Cross-Site Scripting