810 matches found
CVE-2019-15318
The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...
Code injection
The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...
CVE-2017-18577
The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of addqueryarg...
CVE-2017-18577
The CVE-2017-18577 affects the Mailchimp-for-WP WordPress plugin, specifically versions prior to 4.1.8, due to an XSS flaw triggered by the return value of add_query_arg. Multiple sources (Red Hat, CNVD, CVE lists) confirm XSS in this plugin, with exploitation possible since the vulnerability is ...
CVE-2019-15318
CVE-2019-15318 concerns the WordPress plugin yikes-inc-easy-mailchimp-extender (before 6.5.3) with a vulnerability described as code injection via an admin input field. The NVD record lists a high base score (CVSS v2: 7.5; CVSS v3.0: 9.8, CRITICAL) and indicates network attack vector with low com...
CVE-2019-15318
The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...
PT-2019-8511
Name of the Vulnerable Software and Affected Versions mailchimp-for-wp plugin versions prior to 4.1.8 Description The issue concerns a problem where the return value of add query arg can be exploited, leading to XSS. Recommendations For versions prior to 4.1.8, update to version 4.1.8 or later to...
CVE-2017-18577: Improper Neutralization of Input During Web Page Generation
The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of addqueryarg...
CVE-2019-15318: Improper Control of Generation of Code
The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...
CVE-2016-10871
The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page...
CVE-2016-10871
The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page...
Design/Logic Flaw
The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page...
CVE-2016-10871
The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page...
CVE-2016-10871
Vulnerability summary (CVE-2016-10871): The Mailchimp for WordPress (mailchimp-for-wp) plugin for WordPress is affected up to version 4.0.10, with an XSS flaw on the integration settings page. The root cause is a lack of proper input validation on client-side data, leading to cross-site scripting...
PT-2019-7667
Name of the Vulnerable Software and Affected Versions mailchimp-for-wp plugin versions prior to 4.0.11 Description The issue concerns a cross-site scripting XSS problem on the integration settings page. Recommendations For versions prior to 4.0.11, update to version 4.0.11 or later to resolve the...
CVE-2016-10871: Improper Neutralization of Input During Web Page Generation
The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page...
Easy Forms for Mailchimp < 6.5.3 - Code Injection
The Easy Forms for Mailchimp WordPress plugin was affected by a Code Injection security vulnerability...
kavas.com XSS vulnerability
Open Bug Bounty ID: OBB-676725 Description| Value ---|--- Affected Website:| kavas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
MailChimp Bans ICO & Blockchain Marketing- Fundraisers Devastated
By Waqas Well-known email distribution platform MailChimp announced a change in its This is a post from HackRead.com Read the original post: MailChimp Bans ICO & Blockchain Marketing- Fundraisers Devastated...
WordPress MailChimp for WooCommerce plugin <= 2.1.1 - Local File Inclusion
WordPress MailChimp for WooCommerce plugin is prone to a Local File Inclusion vulnerability in 2.1.2 version. The vulnerability was in /admin/partials/tabs/notices.php file in if isset $GET'errornotice' ... IF conditional statement which lead to includeDIR.'/errors/'.$GET'errornotice'.'.php'; loc...