7 matches found
EUVD-2022-34542
Malicious code in bioql PyPI...
EUVD-2023-54761
Malicious code in bioql PyPI...
EUVD-2022-34810
Malicious code in bioql PyPI...
EUVD-2023-23581
Malicious code in bioql PyPI...
CVE-2024-7489
The Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form color parameters in all versions up to, and including, 2.5.7 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2022-2267
The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users such as subscriber to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan priva...
CVE-2024-8870
The CVE-2024-8870 entry concerns the WordPress plugin Forms for Mailchimp by Optin Cat – Grow Your MailChimp List, with a Reflected Cross-Site Scripting (XSS) flaw caused by improper escaping of add_query_arg. Affected versions are all up to and including 2.5.6. Unauthenticated attackers could in...