TI-2026-51466 CVE-2026-73346 · GHSA-227m-w7gv-633p
WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability
Priority LOW 33
Administrator SQL Injection in MailChimp For WooCommerce < 6.2 versions.
Mailchimp
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Mailchimp records in CISA KEVNo Mailchimp vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2014-05968 CVE-2014-7152 · GHSA-26r4-vjwg-4pqh
Cross-site scripting (XSS) vulnerability in the Easy MailChimp Forms plugin 3.0 through…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in the Easy MailChimp Forms plugin 3.0 through 5.0.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the update_options action to wp-admin/admin-a…
TI-2022-02092 CVE-2022-2267 · GHSA-c7c8-3594-h7vm
MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF
Priority LOW 21
The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users (such as subscriber) to perform a POST request on behalf of the server to the internal network/LAN, the body…
TI-2025-11160 CVE-2025-12172 · GHSA-m8v5-px35-v2vx
Mailchimp List Subscribe Form <= 2.0.0 - Cross-Site Request Forgery to Mailchimp List Change
Priority LOW 19
The Mailchimp List Subscribe Form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0.
TI-2022-02361 CVE-2022-2556 · GHSA-34p2-9566-jfhx
MailChimp for Woocommerce < 2.7.2 - Admin+ SSRF
Priority LOW 15
The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is al…