CVE-2026-7520

The MailChimp Forms by MailMunch plugin for WordPress (affected versions up to 3.2.7) is vulnerable to unauthorized data modification due to a missing capability check on the sign_in() and sign_up() AJAX handlers. This allows an attacker with Subscriber-level access (or higher) to relink the site...

Localize: User credentials are sent in clear text

Vulnerability description User credentials are transmitted over an unencrypted channel. This information should always be transferred via an encrypted channel HTTPS to avoid being intercepted by malicious users. This vulnerability affects /pages/signup. Discovered by: MANUALLY Attack details Form...