CVE-2026-92435

Mailchimp for WooCommerce (WordPress plugin) versions before 6.1.1 suffer from a broken access control vulnerability in its REST API. The plugin fails to verify that the requesting user holds the required capability in the permission callback for several of its REST API routes. This allows unauth...