Skip to contentDvankooten Mc4wp: Mailchimp For Wordpress vulnerabilities
- dvankooten mc4wp: mailchimp for wordpressMC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Arbitrary Shortcode Execution via Dynamic Content TagCVE-2026-1181664.8 Medium
- dvankooten mc4wp: mailchimp for wordpressMC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Subscription Audience OverrideCVE-2026-1181675.3 Medium
- dvankooten mc4wp: mailchimp for wordpressMC4WP: Mailchimp for WordPress <= 4.14.0 - Reflected Cross-Site Scripting via 'data' Dynamic Content TagCVE-2026-879176.1 Medium
- dvankooten mc4wp: mailchimp for wordpressMC4WP: Mailchimp for WordPress <= 4.12.0 - Authenticated (Author+) Stored Cross-Site Scripting via Form Response MessagesCVE-2026-45616.4 Medium
- dvankooten mc4wp: mailchimp for wordpressMC4WP: Mailchimp for WordPress <= 4.11.1 - Missing Authorization to Unauthenticated Arbitrary Subscription DeletionCVE-2026-17816.5 Medium
- dvankooten mc4wp: mailchimp for wordpress, ibericode mailchimp +1 moreMailChimp for Wordpress <= 4.9.16 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-86804.4 Medium
- dvankooten mc4wp: mailchimp for wordpress, ibericode mailchimp +1 moreMC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site ScriptingCVE-2024-88506.1 Medium
- dvankooten mc4wp: mailchimp for wordpress, ibericode mailchimp for wordpress +1 moreWordPress MC4WP plugin <= 4.8.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2021-368334.8 Medium