143 matches found
CVE-2026-81783
Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...
EUVD-2026-75516
Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...
CVE-2026-81783 WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability
Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...
CVE-2026-81783
CVE-2026-81783 affects the WordPress plugin MailMunch – Grow your Email List , versions ≤ 3.2.5 . The vulnerability is a Broken Authentication flaw exploitable by users with the Subscriber role. Discovered by Jakub Herman , it carries a CVSS 3.1 score of 7.1 (HIGH) with the vector AV:N/AC:L/PR:L/...
CVE-2026-81783 WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability
Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...
CVE-2026-81783: Authentication Bypass Using an Alternate Path or Channel
Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...
PT-2026-89430
Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...
WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin MailMunch – Grow your Email List versions = 3.2.5...
WordPress Mailmunch Forms for Mailchimp plugin <= 3.2.7 - Missing Authorization to Authenticated (Subscriber+) MailMunch Integration Takeover vulnerability
Missing Authorization to Authenticated Subscriber+ MailMunch Integration Takeover vulnerability discovered by t0ann9uy3n in WordPress Plugin MailChimp Forms by MailMunch versions = 3.2.7...
CVE-2026-7520
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the signin and signup AJAX handlers in all versions up to, and including, 3.2.7. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2026-7520 MailChimp Forms by MailMunch <= 3.2.7 - Missing Authorization to Authenticated (Subscriber+) MailMunch Integration Takeover via 'sign_in' AJAX Action
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the signin and signup AJAX handlers in all versions up to, and including, 3.2.7. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2026-7520 MailChimp Forms by MailMunch <= 3.2.7 - Missing Authorization to Authenticated (Subscriber+) MailMunch Integration Takeover via 'sign_in' AJAX Action
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the signin and signup AJAX handlers in all versions up to, and including, 3.2.7. This makes it possible for authenticated attackers, with Subscriber-level...
EUVD-2026-53287
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the signin and signup AJAX handlers in all versions up to, and including, 3.2.7. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2026-7520
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the signin and signup AJAX handlers in all versions up to, and including, 3.2.7. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2026-7520
The MailChimp Forms by MailMunch plugin for WordPress (affected versions up to 3.2.7) is vulnerable to unauthorized data modification due to a missing capability check on the sign_in() and sign_up() AJAX handlers. This allows an attacker with Subscriber-level access (or higher) to relink the site...
CVE-2026-7520: Missing Authorization
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the signin and signup AJAX handlers in all versions up to, and including, 3.2.7. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2023-45647
Cross-Site Request Forgery CSRF vulnerability in MailMunch Constant Contact Forms by MailMunch plugin = 2.0.10 versions...
EUVD-2023-44800
Malicious code in bioql PyPI...