Design/Logic Flaw

The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of addqueryarg...

CVE-2019-15318

The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...

Code injection

The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...

CVE-2017-18577

The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of addqueryarg...

CVE-2017-18577

The CVE-2017-18577 affects the Mailchimp-for-WP WordPress plugin, specifically versions prior to 4.1.8, due to an XSS flaw triggered by the return value of add_query_arg. Multiple sources (Red Hat, CNVD, CVE lists) confirm XSS in this plugin, with exploitation possible since the vulnerability is ...

CVE-2019-15318

CVE-2019-15318 concerns the WordPress plugin yikes-inc-easy-mailchimp-extender (before 6.5.3) with a vulnerability described as code injection via an admin input field. The NVD record lists a high base score (CVSS v2: 7.5; CVSS v3.0: 9.8, CRITICAL) and indicates network attack vector with low com...

CVE-2019-15318

The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...

PT-2019-8511

Name of the Vulnerable Software and Affected Versions mailchimp-for-wp plugin versions prior to 4.1.8 Description The issue concerns a problem where the return value of add query arg can be exploited, leading to XSS. Recommendations For versions prior to 4.1.8, update to version 4.1.8 or later to...

CVE-2017-18577: Improper Neutralization of Input During Web Page Generation

The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of addqueryarg...

CVE-2019-15318: Improper Control of Generation of Code

The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...

CVE-2016-10871

The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page...

CVE-2016-10871

The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page...

Design/Logic Flaw

The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page...

CVE-2016-10871

The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page...

CVE-2016-10871

Vulnerability summary (CVE-2016-10871): The Mailchimp for WordPress (mailchimp-for-wp) plugin for WordPress is affected up to version 4.0.10, with an XSS flaw on the integration settings page. The root cause is a lack of proper input validation on client-side data, leading to cross-site scripting...

PT-2019-7667

Name of the Vulnerable Software and Affected Versions mailchimp-for-wp plugin versions prior to 4.0.11 Description The issue concerns a cross-site scripting XSS problem on the integration settings page. Recommendations For versions prior to 4.0.11, update to version 4.0.11 or later to resolve the...

CVE-2016-10871: Improper Neutralization of Input During Web Page Generation

The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page...

Easy Forms for Mailchimp < 6.5.3 - Code Injection

The Easy Forms for Mailchimp WordPress plugin was affected by a Code Injection security vulnerability...

kavas.com XSS vulnerability

Open Bug Bounty ID: OBB-676725 Description| Value ---|--- Affected Website:| kavas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

MailChimp Bans ICO & Blockchain Marketing- Fundraisers Devastated

By Waqas Well-known email distribution platform MailChimp announced a change in its This is a post from HackRead.com Read the original post: MailChimp Bans ICO & Blockchain Marketing- Fundraisers Devastated...