dvankooten

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

dvankooten records in CISA KEV

No dvankooten vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Mailchimp For Wordpress · all components

TI-2017-13750 CVE-2017-18577 · GHSA-5r89-pg9g-xf8p

LOW 29

The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-08-22 No fix listed CWE-79

TI-2016-08909 CVE-2016-10871 · GHSA-chff-6qxv-g426

LOW 29

The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2019-08-13 No fix listed CWE-79

TI-2021-14938 CVE-2021-36833 · GHSA-xhfm-f7f9-cpx6

LOW 23

Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ibericode's MC4WP plugin <= 4.8.6 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00529 Published 2022-05-20 No fix listed CWE-79