What’s Vulnerable › Products

dvankooten MC4WP: Mailchimp for WordPress vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your dvankooten MC4WP: Mailchimp for WordPress version is affected

Latest dvankooten MC4WP: Mailchimp for WordPress vulnerabilities

• CVE-2026-87917 — MC4WP: Mailchimp for WordPress <= 4.14.0 - Reflected Cross-Site Scripting via 'data' Dynamic Content Tag (CVSS 6.1)
• CVE-2026-4561 — MC4WP: Mailchimp for WordPress <= 4.12.0 - Authenticated (Author+) Stored Cross-Site Scripting via Form Response Messages (CVSS 6.4)
• CVE-2026-1781 — MC4WP: Mailchimp for WordPress <= 4.11.1 - Missing Authorization to Unauthenticated Arbitrary Subscription Deletion (CVSS 6.5)
• CVE-2024-8680 — MailChimp for Wordpress <= 4.9.16 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 5.5)
• CVE-2024-8850 — MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2023-51682 — WordPress MC4WP plugin <= 4.9.9 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2023-32517 — WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.3 is vulnerable to Open Redirection (CVSS 6.1)