WordPress Plugin Vulnerabilities

Mailchimp For WP < 4.1.8 - XSS

Description

The MC4WP: Mailchimp for WordPress WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
mailchimp-for-wp
Fixed in 4.1.8

References

CVE
CVE-2017-18577

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
e0a6438d-d183-4e6c-845c-e88a9bb6f59b

Timeline

Publicly Published
2017-09-08 (about 8 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-07-17
Title
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) < 5.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2021-08-18
Title
Gutenslider < 5.2.0 - Contributor+ Stored XSS
Published
2025-12-05
Title
List Attachments Shortcode <= 0.4.1a - Authenticated (Author+) Stored Cross-Site Scripting via list-attachments Shortcode
Published
2015-08-04
Title
Ninja Forms <= 2.9.21 - Authenticated Reflected Cross-Site Scripting (XSS)
Published
2025-01-06
Title
Hash Elements < 1.5.1 - Contributor+ Stored XSS