Vulnerabilities

TI-2026-56419 CVE-2026-81783 · GHSA-xf8c-j588-6gmg

WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability

LOW 31

Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 versions.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00402 Published 2026-09-10 No fix listed CWE-288

TI-2026-06610 CVE-2026-7520 · GHSA-49m8-524g-8rr2

Missing authorization in Mailmunch Forms for Mailchimp

LOW 38

The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `sign_in()` and `sign_up()` AJAX handlers in all versions up to, and inclu…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00488 Published 2026-08-05 No fix listed CWE-862

TI-2023-21073 CVE-2023-40203 · GHSA-476h-737f-mc4w

WordPress MailChimp Forms by MailMunch plugin <= 3.1.4 - Broken Access Control

LOW 39

Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailChimp Forms by MailMunch: from n/a through 3.1.…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00706 Published 2024-12-13 No fix listed CWE-862

TI-2024-08104 CVE-2024-8735 · GHSA-4pc9-9v7h-c7xq

MailMunch – Grow your Email List <= 3.1.8 - Reflected Cross-Site Scripting

LOW 28

The MailMunch – Grow your Email List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.1.…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00523 Published 2024-11-22 No fix listed CWE-79

TI-2024-08095 CVE-2024-8726 · GHSA-cq6m-qc88-xjpx

MailChimp Forms by MailMunch <= 3.2.3 - Reflected Cross-Site Scripting

LOW 27

The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.2.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00331 Published 2024-11-20 No fix listed CWE-79

TI-2024-08919 CVE-2024-9614 · GHSA-rrmh-fqvc-qc97

Constant Contact Forms by MailMunch <= 2.1.2 - Reflected Cross-Site Scripting

LOW 28

The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00552 Published 2024-11-13 No fix listed CWE-79

TI-2024-20750 CVE-2024-31378 · GHSA-63vc-3rx9-frx5

WordPress MailChimp Forms by MailMunch plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailChimp Forms by MailMunch.This issue affects MailChimp Forms by MailMunch: from n/a through 3.2.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00221 Published 2024-04-15 No fix listed CWE-352

TI-2024-20721 CVE-2024-31349 · GHSA-wc9x-r2g7-vjwr

WordPress MailMunch – Grow your Email List plugin <= 3.1.6 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch MailMunch – Grow your Email List allows Stored XSS.This issue affects MailMunch – Grow your Email List: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00317 Published 2024-04-07 No fix listed CWE-79

TI-2024-19569 CVE-2024-29793 · GHSA-j925-xw2g-p4c2

WordPress MailChimp Forms by MailMunch plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch MailChimp Forms by MailMunch allows Stored XSS.This issue affects MailChimp Forms by MailMunch: from n/a thr…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00357 Published 2024-03-27 No fix listed CWE-79

TI-2024-14738 CVE-2024-22137 · GHSA-795m-rc94-p75x

WordPress Constant Contact Forms by MailMunch Plugin <= 2.0.11 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch Constant Contact Forms by MailMunch allows Stored XSS.This issue affects Constant Contact Forms by MailMunch…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00317 Published 2024-01-12 No fix listed CWE-79

TI-2023-24522 CVE-2023-45748 · GHSA-7hch-jrf6-fjw8

WordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailChimp Forms by MailMunch plugin <= 3.1.4 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00259 Published 2023-10-16 No fix listed CWE-352

TI-2023-24448 CVE-2023-45647 · GHSA-rggm-rhpj-48vx

WordPress Constant Contact Forms by MailMunch Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in MailMunch Constant Contact Forms by MailMunch plugin <= 2.0.10 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00252 Published 2023-10-16 No fix listed CWE-352

TI-2023-22245 CVE-2023-41852 · GHSA-w9pg-pc9m-p2rx

WordPress MailMunch – Grow your Email List Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailMunch – Grow your Email List plugin <= 3.1.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00259 Published 2023-10-10 No fix listed CWE-352

Vulnerabilities

Filters