Lucene search
+L

65 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•3 views

CVE-2024-31378: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MailMunch MailChimp Forms by MailMunch.This issue affects MailChimp Forms by MailMunch: from n/a through 3.2.1...

8.8CVSS5.8AI score0.00221EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/15 12:00 a.m.•20 views

PT-2024-24024 · Mailmunch · Mailchimp Forms By Mailmunch

Name of the Vulnerable Software and Affected Versions: MailChimp Forms by MailMunch versions 3.2.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

8.8CVSS6.6AI score0.00221EPSS
SaveExploits0References7
Patchstack
Patchstack
•added 2024/04/10 6:21 a.m.•20 views

WordPress MailChimp Forms by MailMunch plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin MailChimp Forms by MailMunch versions = 3.2.1...

8.8CVSS7AI score0.00221EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2024/03/27 1:15 p.m.•23 views

CVE-2024-29793

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MailMunch MailChimp Forms by MailMunch allows Stored XSS.This issue affects MailChimp Forms by MailMunch: from n/a through 3.2.2...

5.4CVSS5.8AI score0.00357EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/27 12:42 p.m.•87 views

CVE-2024-29793

CVE-2024-29793 is a Stored XSS in the MailChimp Forms by MailMunch plugin for WordPress (MailChimp Forms by MailMunch), affecting versions up to 3.2.2. The vulnerability is described as Stored XSS via Shortcode. Wordfence and related feeds note that the issue has been patched; specific fixed vers...

6.5CVSS8.6AI score0.00357EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•7 views

CVE-2024-29793: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MailMunch MailChimp Forms by MailMunch allows Stored XSS.This issue affects MailChimp Forms by MailMunch: from n/a through 3.2.2...

6.5CVSS5.8AI score0.00357EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•16 views

WordPress Plugin MailChimp Forms by MailMunch 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.5CVSS7AI score0.00357EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•22 views

PT-2024-23037 · Mailmunch · Mailchimp Forms By Mailmunch

Name of the Vulnerable Software and Affected Versions: MailChimp Forms by MailMunch versions 3.2.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

6.5CVSS9.1AI score0.00357EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2024/03/25 12:00 a.m.•25 views

WordPress MailChimp Forms by MailMunch Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)

Software MailChimp Forms by MailMunch Type Plugin Vulnerable versions = 3.2.2 Fixed in 3.2.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29793 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b65cb3b63fe6 Credits Ngô Thiên An ancorn from...

6.5CVSS6.9AI score0.00357EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/10/16 11:15 a.m.•14 views

CVE-2023-45748

Cross-Site Request Forgery CSRF vulnerability in MailMunch MailChimp Forms by MailMunch plugin = 3.1.4 versions...

8.8CVSS7.3AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/16 11:15 a.m.•21 views

CVE-2023-45748

Cross-Site Request Forgery CSRF vulnerability in MailMunch MailChimp Forms by MailMunch plugin = 3.1.4 versions...

8.8CVSS5.8AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/16 10:01 a.m.•78 views

CVE-2023-45748

CVE-2023-45748 affects the MailMunch MailChimp Forms by MailMunch WordPress plugin, vulnerable in versions

8.8CVSS6.4AI score0.00214EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/16 10:01 a.m.•30 views

CVE-2023-45748 WordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MailMunch MailChimp Forms by MailMunch plugin = 3.1.4 versions...

4.3CVSS9AI score0.00214EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/10/16 10:01 a.m.•22 views

CVE-2023-45748 WordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MailMunch MailChimp Forms by MailMunch plugin = 3.1.4 versions...

4.3CVSS7.1AI score0.00214EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/16 12:00 a.m.•1 views

CVE-2023-45748: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MailMunch MailChimp Forms by MailMunch plugin = 3.1.4 versions...

8.8CVSS7.8AI score0.00214EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/16 12:00 a.m.•18 views

WordPress Plugin MailChimp Forms by MailMunch Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin MailChimp Forms by MailMun...

8.8CVSS6.5AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/10/16 12:00 a.m.•23 views

PT-2023-29664 · Mailmunch · Mailchimp Forms By Mailmunch

Name of the Vulnerable Software and Affected Versions: MailMunch MailChimp Forms by MailMunch plugin versions = 3.1.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

8.8CVSS8.8AI score0.00214EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2023/10/12 12:00 a.m.•20 views

WordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software MailChimp Forms by MailMunch Type Plugin Vulnerable versions = 3.1.4 Fixed in 3.1.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-45748 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b4559bd74066 Credits Abdi...

8.8CVSS6.6AI score0.00214EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2023/08/11 12:00 a.m.•29 views

WordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Broken Access Control

Software MailChimp Forms by MailMunch Type Plugin Vulnerable versions = 3.1.4 Fixed in 3.1.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-40203 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1430c7736a5b Credits István Márton...

6.3AI score0.00706EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/05/30 12:00 a.m.•18 views

PT-2023-19962 · WordPress · Easy Forms For Mailchimp

Name of the Vulnerable Software and Affected Versions: Easy Forms for Mailchimp WordPress plugin versions prior to 6.8.9 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs when the debug option is enabled, and a parameter is not properly sanitised and escaped...

6.1CVSS6.5AI score0.01092EPSS
SaveExploits2References5
Rows per page
Query Builder