dvankooten

Products

Product	CVEs	Exploited	Latest
MC4WP: Mailchimp for WordPress	5	–	Sep 19, 2026
Koko Analytics – Privacy Friendly Statistics for WordPress	1	–	Sep 24, 2024
MC4WP: Mailchimp Top Bar	1	–	Oct 2, 2024
Social Sharing (by Danny)	1	–	Oct 12, 2024

CVE-2026-87917 Medium 6.1 MC4WP: Mailchimp for WordPress <= 4.14.0 - Reflected Cross-Site Scripting via 'data' Dynamic Content Tag 0.4%
CVE-2026-4561 Medium 6.4 MC4WP: Mailchimp for WordPress <= 4.12.0 - Authenticated (Author+) Stored Cross-Site Scripting via Form Response Messages 0.3%
CVE-2026-1781 Medium 6.5 MC4WP: Mailchimp for WordPress <= 4.11.1 - Missing Authorization to Unauthenticated Arbitrary Subscription Deletion 0.3%
CVE-2024-9704 Medium 6.4 Social Sharing (by Danny) <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
CVE-2024-9210 Medium 6.1 MC4WP: Mailchimp Top Bar <= 1.6.0 - Reflected Cross-Site Scripting 0.4%
CVE-2024-8662 Medium 6.1 Koko Analytics <= 1.3.12 - Reflected Cross-Site Scripting 0.5%
CVE-2024-8680 Medium 4.4 MailChimp for Wordpress <= 4.9.16 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.5%
CVE-2024-8850 Medium 6.1 MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting 0.5%