PluginOps

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

PluginOps records in CISA KEV

No PluginOps vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Mailchimp Subscribe Form · all components

TI-2023-16487 CVE-2023-33328 · GHSA-mr7g-6mvm-973v

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PluginOps MailChimp Subscribe Form plugin <= 4.0.9.1 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-05-28 No fix listed CWE-79