Read the docs

dvankooten

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

dvankooten records in CISA KEV

No dvankooten vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mailchimp 4 records LOW Mailchimp For Wordpress 3 records LOW Koko Analytics 2 records HIGH Mailchimp Top Bar 1 record LOW Social Sharing 1 record LOW

Records

16 records

TI-2024-08546 CVE-2024-9210 · GHSA-5cxw-32vw-9x98

MC4WP: Mailchimp Top Bar <= 1.6.0 - Reflected Cross-Site Scripting

Priority LOW 29

The MC4WP: Mailchimp Top Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.6.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00386 Published 2024-10-02 No fix listed CWE-79
TI-2026-03965 CVE-2026-4561 · GHSA-fm8w-hq2c-rg96

Cross-site scripting in dvankooten MC4WP: Mailchimp for WordPress

Priority LOW 28

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form response message post meta fields (e.g., 'text_subscribed', 'text_error') in all versions up to, and inclu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00331 Published 2026-08-22 No fix listed CWE-79
TI-2024-09001 CVE-2024-9704 · GHSA-3j7g-6hfp-ww62

Social Sharing (by Danny) <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 28

The Social Sharing (by Danny) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dvk_social_sharing' shortcode in all versions up to, and including, 1.3.7 due to insufficient input saniti…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-10-12 No fix listed CWE-79
TI-2024-08216 CVE-2024-8850 · GHSA-m4mc-hq8f-pjxg

MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting

Priority LOW 28

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email' parameter when a placeholder such as {email} is used for the field in versions 4.9.9 to 4.9.16 due t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0048 Published 2024-09-19 No fix listed CWE-79
TI-2024-08035 CVE-2024-8662 · GHSA-3292-h24j-xq6c

Koko Analytics <= 1.3.12 - Reflected Cross-Site Scripting

Priority LOW 28

The Koko Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.3.12.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00471 Published 2024-09-24 No fix listed CWE-79
TI-2026-59983 CVE-2026-87917 · GHSA-fhmr-f2rv-cv78

MC4WP: Mailchimp for WordPress <= 4.14.0 - Reflected Cross-Site Scripting via 'data' Dynamic Content Tag

Priority LOW 27

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'data' Dynamic Content Tag in all versions up to, and including, 4.14.0 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0038 Published 2026-09-19 No fix listed CWE-79
TI-2023-15799 CVE-2023-32517 · GHSA-q34j-6xqh-3786

WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.3 is vulnerable to Open Redirection

Priority LOW 27

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder.This issue affects MailChimp Subscribe Form, Optin Builder, PopUp Builde…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00376 Published 2023-12-29 No fix listed CWE-601
TI-2023-27741 CVE-2023-50836 · GHSA-7gxc-74rc-72cp

WordPress HTML Forms Plugin <= 1.3.28 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ibericode HTML Forms allows Stored XSS.This issue affects HTML Forms: from n/a through 1.3.28.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00336 Published 2023-12-28 No fix listed CWE-79
TI-2024-08051 CVE-2024-8680 · GHSA-j2wp-jm3g-6f93

MailChimp for Wordpress <= 4.9.16 - Authenticated (Administrator+) Stored Cross-Site Scripting

Priority LOW 25

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.9.16 due to insufficient input sanitization and output escap…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00529 Published 2024-09-21 No fix listed CWE-80
TI-2026-86153 CVE-2026-27356 · GHSA-gqc2-g7c3-2x8v

Missing authorization in MC4WP WordPress plugin lets attackers modify data

Priority LOW 24

Missing Authorization vulnerability in ibericode MC4WP mailchimp-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MC4WP: from n/a through 4.14.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00247 Published 2026-11-06 No fix listed CWE-862
Open these records in search →