CVE-2026-118167MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Subscription Audience Override

Açıklama

The MC4WP: Mailchimp for WordPress plugin before 4.15.0 does not validate that the Mailchimp audience a sign-up form or bundled integration subscribes a visitor to matches the audience configured by the site owner, allowing unauthenticated visitors to subscribe arbitrary email addresses to any other audience in the site's connected Mailchimp account.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Kaynaklar ve yamalar

• https://wpscan.com/vulnerability/11752539-1dc8-4adb-a680-ce7ecaaff4d1/ exploitvdb-entrytechnical-description