Vulnerabilities and Security Researches

MC4WP: Mailchimp for WordPress, CVE-2017-18577

CVE, Research URL: CVE-2017-18577
Home page URL: Security reports for MC4WP: Mailchimp for WordPress
Application: MC4WP: Mailchimp for WordPress
Published on: Aug 22, 2019
Research Description: The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg.
Affected versions: max 4.1.8.
Status: vulnerable