Lucene search
+L

46 matches found

NVD
NVD
added 6 days ago5 views

CVE-2026-27536

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

7.1CVSS0.0018EPSS
SaveExploits0References1
CVE
CVE
added 6 days ago21 views

CVE-2026-27536

The CVE-2026-27536 details an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress MailChimp Subscribe Forms plugin, versions

7.1CVSS5.1AI score0.0018EPSS
SaveExploits0References1
EUVD
EUVD
added 6 days ago8 views

EUVD-2026-57934

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

7.1CVSS5.1AI score0.0018EPSS
SaveExploits0References1
Cvelist
Cvelist
added 6 days ago31 views

CVE-2026-27536 WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

7.1CVSS0.0018EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/08/11 10:38 a.m.5 views

WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by HaiND in WordPress Plugin MailChimp Subscribe Forms versions = 4.3.3...

7.1CVSS5.1AI score0.0018EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2026/07/10 4:31 a.m.13 views

EUVD-2026-42804

The Newsletter, SMTP, Email marketing and Subscribe forms by Brevo formely Sendinblue plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the page parameter in all versions up to, and including, 3.1.77 due to insufficient input sanitization and output escaping. This makes it...

6.1CVSS6.1AI score0.00256EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2024-40652

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.00339EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2025-2946

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00234EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 11:42 a.m.10 views

CVE-2025-22727

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginOps MailChimp Subscribe Forms mailchimp-subscribe-sm allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through = 4.1...

6.5CVSS7.2AI score0.00234EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:38 a.m.15 views

CVE-2024-43211

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through 4.0.9.9...

5.9CVSS6.7AI score0.00339EPSS
SaveExploits0
NVD
NVD
added 2025/01/21 2:15 p.m.36 views

CVE-2025-22727

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginOps MailChimp Subscribe Forms mailchimp-subscribe-sm allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through = 4.1...

6.5CVSS0.00234EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/21 1:57 p.m.42 views

CVE-2025-22727 WordPress MailChimp Subscribe Form plugin <= 4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginOps MailChimp Subscribe Forms mailchimp-subscribe-sm allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through = 4.1...

6.5CVSS0.00234EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/21 12:0 a.m.12 views

PT-2025-4652 · Unknown · Pluginops Mailchimp Subscribe Forms

Name of the Vulnerable Software and Affected Versions: PluginOps MailChimp Subscribe Forms versions prior to 4.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means an attacker can inject...

6.5CVSS9.1AI score0.00234EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.12 views

WordPress plugin MailChimp Subscribe Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00234EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/11/01 3:15 p.m.10 views

CVE-2024-43211

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through 4.0.9.9...

5.9CVSS5.2AI score0.00339EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/11/01 2:17 p.m.15 views

CVE-2024-43211 WordPress MailChimp Subscribe Form plugin <=4.0.9.9 - Stored Cross-Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through 4.0.9.9...

5.9CVSS5.7AI score0.00339EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:17 p.m.42 views

CVE-2024-43211

CVE-2024-43211 is a Stored XSS vulnerability in the WordPress plugin MailChimp Subscribe Forms (versions up to and including 4.0.9.9; affected versions are listed as n/a through 4.0.9.9). The issue stems from improper neutralization of input during web page generation. Impact is described as cros...

5.9CVSS5.7AI score0.00339EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.9 views

PT-2024-30374 · Pluginops · Pluginops Mailchimp Subscribe Forms

Name of the Vulnerable Software and Affected Versions: PluginOps MailChimp Subscribe Forms versions n/a through 4.0.9.9 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

5.9CVSS5.3AI score0.00339EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.7 views

WordPress plugin MailChimp Subscribe Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6AI score0.00339EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/10 2:6 a.m.18 views

CVE-2024-8477 Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery

The Newsletter, SMTP, Email marketing and Subscribe forms by Brevo formely Sendinblue plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.87. This is due to missing or incorrect nonce validation on the Init function. This makes it possible fo...

4.3CVSS6.5AI score0.00169EPSS
SaveExploits0References2
Rows per page
Query Builder