692 matches found
Drupal PHPUnit/Mailchimp Code Execution Vulnerability
The instance of Drupal running on the remote host is affected by a command execution vulnerability. A remote, unauthenticated attacker can exploit this issue, via a specially crafted HTTP request, to execute commands on the remote host. No source data...
WordPress Easy Forms for Mailchimp Plugin < 6.5.3 Code Injection Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
Drupal PHPUnit/Mailchimp Code Execution Vulnerability
Binary data drupalcve-2017-9841.nbin...
WordPress mailchimp-for-wp plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. mailchimp-for-wp is a plugin used to send e-mail to subscribers. A cross-site scripting vulnerability exists in the WordPress...
WordPress yikes-inc-easy-mailchimp-extender plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. yikes-inc-easy-mailchimp-extender is used in one of the user registration form to add plug-ins . A cross-site scripting...
WordPress Easy Forms for Mailchimp plugin <= 6.5.2 - Code Injection vulnerability
Code Injection vulnerability found by Henri Salo in WordPress Easy Forms for Mailchimp plugin versions = 6.5.2. Solution Update the WordPress Easy Forms for Mailchimp plugin to the latest available version at least 6.5.3...
CVE-2017-18577
The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of addqueryarg...
CVE-2017-18577
The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of addqueryarg...
Design/Logic Flaw
The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of addqueryarg...
CVE-2019-15318
The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...
Code injection
The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...
CVE-2017-18577
The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of addqueryarg...
CVE-2017-18577
The CVE-2017-18577 affects the Mailchimp-for-WP WordPress plugin, specifically versions prior to 4.1.8, due to an XSS flaw triggered by the return value of add_query_arg. Multiple sources (Red Hat, CNVD, CVE lists) confirm XSS in this plugin, with exploitation possible since the vulnerability is ...
CVE-2019-15318
CVE-2019-15318 concerns the WordPress plugin yikes-inc-easy-mailchimp-extender (before 6.5.3) with a vulnerability described as code injection via an admin input field. The NVD record lists a high base score (CVSS v2: 7.5; CVSS v3.0: 9.8, CRITICAL) and indicates network attack vector with low com...
CVE-2019-15318
The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...
PT-2019-8511
Name of the Vulnerable Software and Affected Versions mailchimp-for-wp plugin versions prior to 4.1.8 Description The issue concerns a problem where the return value of add query arg can be exploited, leading to XSS. Recommendations For versions prior to 4.1.8, update to version 4.1.8 or later to...
CVE-2016-10871
The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page...
CVE-2016-10871
The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page...