Read the docs

Mailchimp

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Mailchimp records in CISA KEV

No Mailchimp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mailchimp For Woocommerce 2 records LOW Easy Mailchimp Forms Plugin 1 record LOW

Records

2 records in Mailchimp For Woocommerce · all components

TI-2022-02092 CVE-2022-2267 · GHSA-c7c8-3594-h7vm

MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF

Priority LOW 21

The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users (such as subscriber) to perform a POST request on behalf of the server to the internal network/LAN, the body…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00724 Published 2022-08-29 Fixed in 2.7.1 CWE-918
TI-2022-02361 CVE-2022-2556 · GHSA-34p2-9566-jfhx

MailChimp for Woocommerce < 2.7.2 - Admin+ SSRF

Priority LOW 15

The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is al…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00783 Published 2022-08-29 Fixed in 2.7.2 CWE-918
Open these records in search →