Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: MailMunch Component: Mailchimp Forms Clear all filters
TI-2023-21073 CVE-2023-40203 · GHSA-476h-737f-mc4w

WordPress MailChimp Forms by MailMunch plugin <= 3.1.4 - Broken Access Control

Priority LOW 39

Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailChimp Forms by MailMunch: from n/a through 3.1.…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00706 Published 2024-12-13 No fix listed CWE-862
TI-2024-08095 CVE-2024-8726 · GHSA-cq6m-qc88-xjpx

MailChimp Forms by MailMunch <= 3.2.3 - Reflected Cross-Site Scripting

Priority LOW 27

The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.2.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00331 Published 2024-11-20 No fix listed CWE-79
TI-2024-19569 CVE-2024-29793 · GHSA-j925-xw2g-p4c2

WordPress MailChimp Forms by MailMunch plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch MailChimp Forms by MailMunch allows Stored XSS.This issue affects MailChimp Forms by MailMunch: from n/a thr…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00357 Published 2024-03-27 No fix listed CWE-79