6 matches found
PT-2026-68083
Name of the Vulnerable Software and Affected Versions MailChimp Forms by MailMunch versions prior to 3.2.8 Description The plugin is susceptible to unauthorized data modification because the sign in and sign up AJAX handlers lack proper capability checks. Authenticated users with Subscriber-level...
CVE-2026-7520: Missing Authorization
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the signin and signup AJAX handlers in all versions up to, and including, 3.2.7. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2023-40203: Missing Authorization
Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailChimp Forms by MailMunch: from n/a through 3.1.4...
PT-2024-39205
Name of the Vulnerable Software and Affected Versions: MailChimp Forms by MailMunch plugin for WordPress versions up to, and including, 3.2.3 Description: The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add query arg without...
CVE-2024-8726: Improper Neutralization of Input During Web Page Generation
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.2.3. This makes it possible for unauthenticated attackers to inject arbitrary web...
