WordPress MailChimp 3.1.5 / 4.0.10 Cross Site Scripting Vulnerability

WordPress MailChimp versions 3.1.5 and 4.0.10 suffer from a cross site scripting vulnerability. Details ================ Software: MailChimp for WordPress Version: 3.1.5,4.0.10 Homepage: http://wordpress.org/plugins/mailchimp-for-wp/ Advisory report:...

WordPress plugin MailChimp cross-site scripting vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A cross-site scripting vulnerability exists in the integration parameter of the admin.php page of the WordPress...

WordPress MailChimp 3.1.5 / 4.0.10 Cross Site Scripting

Details ================ Software: MailChimp for WordPress Version: 3.1.5,4.0.10 Homepage: http://wordpress.org/plugins/mailchimp-for-wp/ Advisory report: https://security.dxw.com/advisories/reflected-xss-in-mailchimp-for-wordpress-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can/...

WordPress MailChimp Plugin <= 4.0.10 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability. Solution Update the plugin...

MailChimp for WordPress <= 4.0.10 - Authenticated Cross-Site Scripting (XSS)

The MC4WP: Mailchimp for WordPress WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

WordPress MailChimp 4.0.7 Cross Site Request Forgery / Cross Site Scripting

Exploit Title : WordPress Plugin MailChimp 4.0.7 - Cross-Site Request Forgery / Persistent Cross-Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/plugins/mailchimp-for-wp/ Category: Webapps Tested on: Win Version: 4.0.7 Date: 2016/11/19 PoC: I would like t...

Easy Forms for MailChimp <= 6.0.5.5 - Local File Inclusion (LFI)

The Easy Forms for Mailchimp WordPress plugin was affected by a Local File Inclusion LFI security vulnerability...

WordPress Easy MailChimp Forms Plugin <= 6.0.5.5 - Local File Inclusion

Because of this vulnerability, attackers can run arbitrary PHP code. Solution Update the plugin...

WordPress Easy Forms For MailChimp 6.0.5.5 Local File Inclusion

------------------------------------------------------------------------ Easy Forms for MailChimp Local File Inclusion vulnerability ------------------------------------------------------------------------ Yorick Koster, July 2016...

creative.mailchimp.com XSS vulnerability

Vulnerable URL: http://creative.mailchimp.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

blog.mailchimp.com XSS vulnerability

Vulnerable URL: http://blog.mailchimp.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 13.04.2017 Latest check for patch:| 13.04.2017 20:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

MailChimp for Android - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application MailChimp for Android published at the 'play' market has multiple vulnerabilities...

WordPress MailChimp Subscribe Forms 1.1 Remote Code Execution

Exploit Title: Wordpress Plugin MailChimp Subscribe Forms - Remote Code Execution Date: 23-03-2016 Exploit Author: CrashBandicot Google Dork : inurl:/wp-content/plugins/mailchimp-subscribe-sm/ Vendor Homepage: https://fr.wordpress.org/plugins/mailchimp-subscribe-sm/ Tested on: MSWin32 Version: 1....

Drupal MailChimp module cross-site scripting vulnerability (CNVD-2015-05690)

Drupal is the Drupal community maintained by a set of free, open source content management system developed in PHP. MailChimp is one of the third-party mail delivery service provider MailChimp integration module. A cross-site scripting vulnerability exists in the MailChimp Signup submodule of the...

CVE-2015-5488

Cross-site scripting XSS vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "administer mailchimp" permission to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "administer mailchimp" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5488

Cross-site scripting XSS vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "administer mailchimp" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5488

CVE-2015-5488 is a cross-site scripting vulnerability in Drupal’s MailChimp module (significant for the MailChimp Signup submodule) in 7.x-3.x before 7.x-3.3. The issue allows remote authenticated users with the administrator privilege (administer mailchimp) to inject arbitrary script/HTML via un...

WordPress MailChimp Subscribe Forms PHP Code Execution

A PHP code execution vulnerability has been reported in Wordpress plugin MailChimp Subscribe Forms. The vulnerability is due to insufficient validation of user-controlled email address when handling subscribe requests. An unauthenticated remote attacker can exploit this vulnerability by sending a...

WordPress MailChimp Subscribe Forms 1.1 Remote Code Execution Vulnerability

WordPress MailChimp Subscribe Forms plugin version 1.1 suffers from a remote code execution vulnerability. Exploit Title: Wordpress MailChimp Subscribe Forms Remote Code Execution Date: 21-04-2015 Exploit Author: woodspeed Vendor Homepage: https://wordpress.org/plugins/mailchimp-subscribe-sm/...