811 matches found
CVE-2026-4561
The MC4WP: Mailchimp for WordPress plugin for WordPress is affected by a Stored Cross-Site Scripting (XSS) vulnerability in all versions up to and including 4.12.0 . The flaw resides in the form response message post meta fields (e.g., text_subscribed, text_error), caused by insufficient input sa...
CVE-2026-4561: Improper Neutralization of Input During Web Page Generation
The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form response message post meta fields e.g., 'textsubscribed', 'texterror' in all versions up to, and including, 4.12.0 due to insufficient input sanitization and output escaping. This mak...
PT-2026-79552
Name of the Vulnerable Software and Affected Versions MC4WP: Mailchimp for WordPress versions prior to 4.12.1 Description Insufficient input sanitization and output escaping allow authenticated attackers with Author-level access and above to perform Stored Cross-Site Scripting. This is achieved b...
WordPress GutenKit plugin <= 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure vulnerability
Contributor+ Mailchimp Audience Data Disclosure vulnerability discovered by Shikhali Jamalzade in WordPress Plugin GutenKit versions = 2.4.15...
CVE-2026-19699 GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure
The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to retrieve mailing-list audience metadata from the site's connected marketing account...
CVE-2026-19699
The GutenKit WordPress plugin (versions
CVE-2026-19699 GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure
The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to retrieve mailing-list audience metadata from the site's connected marketing account...
CVE-2026-73346
Administrator SQL Injection in MailChimp For WooCommerce 6.2 versions...
CVE-2026-27536
Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...
EUVD-2026-57911
Administrator SQL Injection in MailChimp For WooCommerce 6.2 versions...
CVE-2026-73346 WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability
Administrator SQL Injection in MailChimp For WooCommerce 6.2 versions...
CVE-2026-73346 WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability
Administrator SQL Injection in MailChimp For WooCommerce 6.2 versions...
CVE-2026-73346
The CVE concerns the WordPress plugin MailChimp For WooCommerce (affected: versions
CVE-2026-27536
The CVE-2026-27536 details an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress MailChimp Subscribe Forms plugin, versions
EUVD-2026-57934
Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...
CVE-2026-27536 WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...
CVE-2026-27536 WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...
CVE-2026-73346: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in MailChimp For WooCommerce 6.2 versions...