Mailchimp for WooCommerce, CVE-2026-92437

CVE, Research URL: CVE-2026-92437
Home page URL: Security reports for Mailchimp for WooCommerce
Application: Mailchimp for WooCommerce
Published on: Oct 03, 2026
Research Description: The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication, a nonce or an ownership check before it acts on a customer's abandoned-cart record identified from request-supplied data, allowing an unauthenticated attacker to modify or delete another customer's stored cart.
Affected versions: max 6.3.
Status: vulnerable