MailMunch

Products

ProductCVEsExploitedLatest
MailChimp Forms by MailMunch5–Dec 13, 2024
MailMunch – Grow your Email List4–Sep 10, 2026
Constant Contact Forms by MailMunch3–Nov 13, 2024
Mailmunch Forms for Mailchimp1–Aug 5, 2026

Exploited and recent CVEs

  • CVE-2026-81783 High 7.1 WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability 0.4%
  • CVE-2026-7520 High 8.1 MailChimp Forms by MailMunch <= 3.2.7 - Missing Authorization to Authenticated (Subscriber+) MailMunch Integration Takeover via 'sign_in' AJAX Action 0.5%
  • CVE-2023-40203 Medium 4.3 WordPress MailChimp Forms by MailMunch plugin <= 3.1.4 - Broken Access Control 0.7%
  • CVE-2024-8735 Medium 6.1 MailMunch – Grow your Email List <= 3.1.8 - Reflected Cross-Site Scripting 0.5%
  • CVE-2024-8726 Medium 6.1 MailChimp Forms by MailMunch <= 3.2.3 - Reflected Cross-Site Scripting 0.3%
  • CVE-2024-9614 Medium 6.1 Constant Contact Forms by MailMunch <= 2.1.2 - Reflected Cross-Site Scripting 0.6%
  • CVE-2024-31378 Medium 5.4 WordPress MailChimp Forms by MailMunch plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-31349 Medium 6.5 WordPress MailMunch – Grow your Email List plugin <= 3.1.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-29793 Medium 6.5 WordPress MailChimp Forms by MailMunch plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-22137 Medium 6.5 WordPress Constant Contact Forms by MailMunch Plugin <= 2.0.11 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-45748 Medium 4.3 WordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-45647 Medium 5.4 WordPress Constant Contact Forms by MailMunch Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-41852 Medium 4.3 WordPress MailMunch – Grow your Email List Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%