MC4WP: Mailchimp for WordPress

Güvenlik açıkları

• CVE-2026-1781kimlik doğrulamasız≤ 4.11.1

  MC4WP: Mailchimp for WordPress <= 4.11.1 - Missing Authorization to Unauthenticated Arbitrary Subscription Deletion

  Orta 6.5

• CVE-2026-4561yazar+≤ 4.12.0

  MC4WP: Mailchimp for WordPress <= 4.12.0 - Authenticated (Author+) Stored Cross-Site Scripting via Form Response Messages

  Orta 6.4

• CVE-2026-87917kimlik doğrulamasız · tıklama gerekir≤ 4.14.0

  MC4WP: Mailchimp for WordPress <= 4.14.0 - Reflected Cross-Site Scripting via 'data' Dynamic Content Tag

  Orta 6.1

• CVE-2024-8850kimlik doğrulamasız · tıklama gerekir≤ 4.9.16

  MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2017-18577kimlik doğrulamasız · tıklama gerekir

  The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg.

  Orta 6.1

• CVE-2016-10871kimlik doğrulamasız · tıklama gerekir

  The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.

  Orta 6.1

• CVE-2024-8680yönetici≤ 4.9.16

  MailChimp for Wordpress <= 4.9.16 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Orta 5.5

• CVE-2023-51682kimlik doğrulamasız≤ 4.9.9

  WordPress MC4WP plugin <= 4.9.9 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2021-36833yönetici≤ 4.8.6

  WordPress MC4WP plugin <= 4.8.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

  Orta 4.8