Vulnerabilities and security researches formailchimp-subscribe-sm mailchimp-subscribe-sm

Jun 06, 2024

CVE, Research URL: CVE-2023-33328
Home page URL: Security reports for MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
Application: MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
Date: May 28, 2023
Research Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PluginOps MailChimp Subscribe Form plugin <= 4.0.9.1 versions.
Affected versions: max 1.2.
Status: vulnerable

CVE, Research URL: CVE-2023-32517
Home page URL: Security reports for MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
Application: MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
Date: Dec 29, 2023
Research Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder.This issue affects MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder: from n/a through 4.0.9.3.
Affected versions: max 4.0.9.4.
Status: vulnerable

CVE, Research URL: 8d47bb64d05cfe1cfbaf909388f1eca7797ab7d2
Home page URL: Security reports for MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
Application: MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
Date: May 26, 2015
Research Description: MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder [mailchimp-subscribe-sm] < 1.2 WordPress MailChimp Subscribe Forms Plugin 1.1 - Remote Code Execution MailChimp Subscribe Forms plugin is prone to a remote code execution vulnerability via "email" field. Upgrade the plugin.
Affected versions: max 1.2.
Status: vulnerable

Aug 13, 2024

CVE, Research URL: CVE-2024-43211
Home page URL: Security reports for MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
Application: MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
Date: Nov 01, 2024
Research Description: Cross Site Scripting (XSS) vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS.This issue affects MailChimp Subscribe Forms: from n/a through 4.0.9.8.
Affected versions: max 4.0.9.9.
Status: vulnerable

Jan 19, 2025

CVE, Research URL: CVE-2025-22727
Home page URL: Security reports for MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
Application: MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
Date: Jan 21, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS. This issue affects MailChimp Subscribe Forms : from n/a through 4.1.
Affected versions: max 4.2.
Status: vulnerable