TI-2026-51466 CVE-2026-73346 · GHSA-227m-w7gv-633p
WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability
Priority LOW 33
Administrator SQL Injection in MailChimp For WooCommerce < 6.2 versions.
Vulnerabilities
5 records
TI-2025-11160 CVE-2025-12172 · GHSA-m8v5-px35-v2vx
Mailchimp List Subscribe Form <= 2.0.0 - Cross-Site Request Forgery to Mailchimp List Change
Priority LOW 19
The Mailchimp List Subscribe Form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0.
TI-2022-02361 CVE-2022-2556 · GHSA-34p2-9566-jfhx
MailChimp for Woocommerce < 2.7.2 - Admin+ SSRF
Priority LOW 15
The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is al…
TI-2022-02092 CVE-2022-2267 · GHSA-c7c8-3594-h7vm
MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF
Priority LOW 21
The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users (such as subscriber) to perform a POST request on behalf of the server to the internal network/LAN, the body…
TI-2014-05968 CVE-2014-7152 · GHSA-26r4-vjwg-4pqh
Cross-site scripting (XSS) vulnerability in the Easy MailChimp Forms plugin 3.0 through…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in the Easy MailChimp Forms plugin 3.0 through 5.0.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the update_options action to wp-admin/admin-a…