ibericode
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| MC4WP | 2 | – | Nov 6, 2026 |
| HTML Forms | 1 | – | Dec 28, 2023 |
| koko-analytics | 1 | – | Jan 19, 2026 |
| MC4WP: Mailchimp for WordPress | 1 | – | May 20, 2022 |
Exploited and recent CVEs
- CVE-2026-27356 WordPress MC4WP plugin <= 4.14.1 - Broken Access Control vulnerability –
- CVE-2026-22850 Koko Analytics vulnerable to arbitrary SQL execution through unescaped analytics export/import and permissive admin SQL import 0.5%
- CVE-2023-51682 WordPress MC4WP plugin <= 4.9.9 - Broken Access Control vulnerability 0.4%
- CVE-2023-50836 WordPress HTML Forms Plugin <= 1.3.28 is vulnerable to Cross Site Scripting (XSS) 0.3%
- CVE-2021-36833 WordPress MC4WP plugin <= 4.8.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.5%