CVE-2016-10871

Vulnerability summary (CVE-2016-10871): The Mailchimp for WordPress (mailchimp-for-wp) plugin for WordPress is affected up to version 4.0.10, with an XSS flaw on the integration settings page. The root cause is a lack of proper input validation on client-side data, leading to cross-site scripting...

PT-2019-7667

Name of the Vulnerable Software and Affected Versions mailchimp-for-wp plugin versions prior to 4.0.11 Description The issue concerns a cross-site scripting XSS problem on the integration settings page. Recommendations For versions prior to 4.0.11, update to version 4.0.11 or later to resolve the...

Easy Forms for Mailchimp < 6.5.3 - Code Injection

The Easy Forms for Mailchimp WordPress plugin was affected by a Code Injection security vulnerability...

kavas.com XSS vulnerability

Open Bug Bounty ID: OBB-676725 Description| Value ---|--- Affected Website:| kavas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

MailChimp Bans ICO & Blockchain Marketing- Fundraisers Devastated

By Waqas Well-known email distribution platform MailChimp announced a change in its This is a post from HackRead.com Read the original post: MailChimp Bans ICO & Blockchain Marketing- Fundraisers Devastated...

WordPress MailChimp for WooCommerce plugin <= 2.1.1 - Local File Inclusion

WordPress MailChimp for WooCommerce plugin is prone to a Local File Inclusion vulnerability in 2.1.2 version. The vulnerability was in /admin/partials/tabs/notices.php file in if isset $GET'errornotice' ... IF conditional statement which lead to includeDIR.'/errors/'.$GET'errornotice'.'.php'; loc...

Hiro: Weak crossdomain.xml

The e-mail list management service used by Blockstack operated by MailChimp has a lenient cross-domain flash policy -- this is not a vulnerability, however, the crossdomain.xml used by the mailing service is more lenient than used by normal web services...

Mailchimp For WP < 4.1.8 - XSS

The MC4WP: Mailchimp for WordPress WordPress plugin was affected by a XSS security vulnerability...

MailChimp for WordPress <= 4.1.6 - Authenticated Cross-Site Scripting (XSS)

Usage of the output of addqueryarg without escaping in various places in the WordPress Backend leads to reflected XSS vulnerability. PoC URL/wp-admin/admin.php?page=mailchimp-for-wp-integrations&"...

MailChimp for WordPress <= 4.1.6 - Authenticated Cross-Site Scripting (XSS)

Usage of the output of addqueryarg without escaping in various places in the WordPress Backend leads to reflected XSS vulnerability. URL/wp-admin/admin.php?page=mailchimp-for-wp-integrations&"alert1...

mailchimp.com XSS vulnerability

Vulnerable URL: https://mailchimp.com/holiday-tips/tip-sign-up/?source=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at 25.10.2017 Latest check for patch:| 25.10.2017 05:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

WordPress MailChimp 3.1.5 / 4.0.10 Cross Site Scripting Vulnerability

WordPress MailChimp versions 3.1.5 and 4.0.10 suffer from a cross site scripting vulnerability. Details ================ Software: MailChimp for WordPress Version: 3.1.5,4.0.10 Homepage: http://wordpress.org/plugins/mailchimp-for-wp/ Advisory report:...

WordPress plugin MailChimp cross-site scripting vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A cross-site scripting vulnerability exists in the integration parameter of the admin.php page of the WordPress...

WordPress MailChimp 3.1.5 / 4.0.10 Cross Site Scripting

Details ================ Software: MailChimp for WordPress Version: 3.1.5,4.0.10 Homepage: http://wordpress.org/plugins/mailchimp-for-wp/ Advisory report: https://security.dxw.com/advisories/reflected-xss-in-mailchimp-for-wordpress-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can/...

WordPress MailChimp Plugin <= 4.0.10 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability. Solution Update the plugin...

MailChimp for WordPress <= 4.0.10 - Authenticated Cross-Site Scripting (XSS)

The MC4WP: Mailchimp for WordPress WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

WordPress MailChimp 4.0.7 Cross Site Request Forgery / Cross Site Scripting

Exploit Title : WordPress Plugin MailChimp 4.0.7 - Cross-Site Request Forgery / Persistent Cross-Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/plugins/mailchimp-for-wp/ Category: Webapps Tested on: Win Version: 4.0.7 Date: 2016/11/19 PoC: I would like t...

Easy Forms for MailChimp <= 6.0.5.5 - Local File Inclusion (LFI)

The Easy Forms for Mailchimp WordPress plugin was affected by a Local File Inclusion LFI security vulnerability...

WordPress Easy MailChimp Forms Plugin <= 6.0.5.5 - Local File Inclusion

Because of this vulnerability, attackers can run arbitrary PHP code. Solution Update the plugin...

WordPress Easy Forms For MailChimp 6.0.5.5 Local File Inclusion

------------------------------------------------------------------------ Easy Forms for MailChimp Local File Inclusion vulnerability ------------------------------------------------------------------------ Yorick Koster, July 2016...