Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Mailchimp Component: Mailchimp For Woocommerce Clear all filters
TI-2022-02361 CVE-2022-2556 · GHSA-34p2-9566-jfhx

MailChimp for Woocommerce < 2.7.2 - Admin+ SSRF

Priority LOW 15

The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is al…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00783 Published 2022-08-29 Fixed in 2.7.2 CWE-918
TI-2022-02092 CVE-2022-2267 · GHSA-c7c8-3594-h7vm

MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF

Priority LOW 21

The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users (such as subscriber) to perform a POST request on behalf of the server to the internal network/LAN, the body…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00724 Published 2022-08-29 Fixed in 2.7.1 CWE-918