CVE-2024-12158

The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'upcdeletedbdata' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for unauthenticated...

CVE-2024-12158: Missing Authorization

The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'upcdeletedbdata' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for unauthenticated...

CVE-2024-12157: Improper Neutralization of Special Elements used in an SQL Command

The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'upcdeletedbrecord' AJAX action in all versions up to, and including, 3.2.6 due to insufficient escaping on the user supplied parameter and lack of...

PT-2025-1766

Name of the Vulnerable Software and Affected Versions Popup – MailChimp, GetResponse and ActiveCampaign Integrations plugin for WordPress versions up to 3.2.6 Description The issue is related to a missing capability check on the 'upc delete db data' AJAX action, which allows unauthenticated...

PT-2025-1765

Name of the Vulnerable Software and Affected Versions Popup – MailChimp, GetResponse and ActiveCampaign Integrations plugin for WordPress versions up to, and including, 3.2.6 Description The issue concerns a SQL injection vulnerability via the id parameter of the upc delete db record AJAX action...