Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: MC4WP: Mailchimp for WordPress 4.15.0 Clear all filters
TI-2026-85767 CVE-2026-118166 · GHSA-7vpp-4gxp-3rx5

MC4WP Mailchimp for WordPress: Unauthenticated Shortcode Execution

Priority LOW 21

The MC4WP: Mailchimp for WordPress WordPress plugin before 4.15.0 does not prevent request-derived values in its dynamic content tags from being processed as shortcodes when a form is embedded with its block, allowing un…

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00177 Published 2026-11-06 Fixed in 4.15.0 CWE-74
TI-2026-85749 CVE-2026-118167 · GHSA-qpwm-gvfh-p35v

Incorrect authorization in MC4WP Mailchimp for WordPress plugin

Priority LOW 29

The MC4WP: Mailchimp for WordPress plugin before 4.15.0 does not validate that the Mailchimp audience a sign-up form or bundled integration subscribes a visitor to matches the audience configured by the site owner, allow…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00214 Published 2026-11-06 Fixed in 4.15.0 CWE-863