CVE-2026-27536

The CVE-2026-27536 details an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress MailChimp Subscribe Forms plugin, versions

CVE-2026-27536 WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

EUVD-2026-57934

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

CVE-2026-27536 WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

royal-addons-mailchimp-csrf-poc

mailchimpscanner Simple scanner/exploit for the Royal Elemen...

CVE-2026-27536: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

PT-2026-71499

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

CVE-2026-73405: Missing Authorization

An authorization bypass vulnerability in Vulnerability-Lookup allowed inactive or unconfirmed accounts to subscribe to Server-Sent Events SSE streams through the /pubsub/subscribe/ endpoint. The tokenrequired decorator used by the Pub/Sub interface authenticated requests solely by matching the...

WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by HaiND in WordPress Plugin MailChimp Subscribe Forms versions = 4.3.3...

EUVD-2026-54376

The Subscribe2 WordPress plugin before 10.46 does not properly escape a user-supplied value before reflecting it into a public subscription form, leading to Reflected Cross-Site Scripting that executes in the browser of an unauthenticated visitor who interacts with the form through a crafted link...

CVE-2026-66706

Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...

CVE-2026-66706

Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...

CVE-2026-66706

CVE-2026-66706 affects the WordPress plugin “Subscribe to Comments” (versions

EUVD-2026-53909

Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...

CVE-2026-66706 WordPress Subscribe to Comments plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...

CVE-2026-66706 WordPress Subscribe to Comments plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...

WordPress Subscribe to Comments plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Subscribe to Comments versions = 2.3.1...

PT-2026-68599

Name of the Vulnerable Software and Affected Versions Subscribe to Comments versions prior to 2.3.2 Description An Author Cross Site Scripting XSS issue exists in the Subscribe to Comments plugin. Cross Site Scripting is a flaw that allows an attacker to inject malicious scripts into web pages...

CVE-2026-66706: Improper Neutralization of Input During Web Page Generation

Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...

WordPress MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin <= 4.3.3 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by she11f in WordPress Plugin MailChimp Subscribe Forms versions = 4.3.3...