WordPress Plugin Vulnerabilities

Nmedia MailChimp 3.1 - api_mailchimp/postToMailChimp.php abs_path Parameter XSS

Description

The N-Media MailChimp Subscription WordPress plugin was affected by an api_mailchimp/postToMailChimp.php abs_path Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
nmedia-mailchimp-widget
Fixed in 3.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
ff2c295b-5c93-4e9b-aa5e-7c336b2f5cde

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2026-04-07
Title
LatePoint < 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published
2014-12-15
Title
SEO Redirection < 2.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
Published
2025-05-29
Title
Verge3D < 4.9.4 - Reflected Cross-Site Scripting
Published
2025-01-24
Title
AI Chatbot for WordPress – Hyve Lite < 1.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2022-07-29
Title
Simple SEO < 1.7.92 - Contributor+ Stored Cross-Site Scripting