Vulnerabilities

TI-2021-14938 CVE-2021-36833 · GHSA-xhfm-f7f9-cpx6

WordPress MC4WP plugin <= 4.8.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

LOW 23

Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ibericode's MC4WP plugin <= 4.8.6 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00529 Published 2022-05-20 No fix listed CWE-79

TI-2017-13750 CVE-2017-18577 · GHSA-5r89-pg9g-xf8p

LOW 29

The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-08-22 No fix listed CWE-79

TI-2016-08909 CVE-2016-10871 · GHSA-chff-6qxv-g426

LOW 29

The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2019-08-13 No fix listed CWE-79