Vulnerabilities (CVE)

Filtered by vendor Ibericode Subscribe
Filtered by product Mailchimp For Wordpress
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-10871 1 Ibericode 1 Mailchimp For Wordpress 2026-01-27 4.3 MEDIUM 6.1 MEDIUM
The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.
CVE-2017-18577 1 Ibericode 1 Mailchimp For Wordpress 2026-01-27 4.3 MEDIUM 6.1 MEDIUM
The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg.
CVE-2021-36833 1 Ibericode 1 Mailchimp For Wordpress 2026-01-20 3.5 LOW 4.8 MEDIUM
Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ibericode's MC4WP plugin <= 4.8.6 at WordPress.