Skip to content
dvankooten MC4WP: Mailchimp for WordPress
-
CVE-2026-87917
Medium 6.1
MC4WP: Mailchimp for WordPress <= 4.14.0 - Reflected Cross-Site Scripting via 'data' Dynamic Content Tag
0.4%
-
CVE-2026-4561
Medium 6.4
MC4WP: Mailchimp for WordPress <= 4.12.0 - Authenticated (Author+) Stored Cross-Site Scripting via Form Response Messages
0.3%
-
CVE-2026-1781
Medium 6.5
MC4WP: Mailchimp for WordPress <= 4.11.1 - Missing Authorization to Unauthenticated Arbitrary Subscription Deletion
0.3%
-
CVE-2024-8680
Medium 4.4
MailChimp for Wordpress <= 4.9.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
0.5%
-
CVE-2024-8850
Medium 6.1
MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting
0.5%