Extension WordPress
Vulnérabilités Connect Contact Form 7 to Mailchimp, Brevo, MailerLite & Klaviyo
Cette page rassemble les failles publiées pour Connect Contact Form 7 to Mailchimp, Brevo, MailerLite & Klaviyo, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Connect Contact Form 7 to Mailchimp, Brevo, MailerLite & Klaviyo
4 fiches
Connect Contact Form 7 and Mailchimp <= 0.9.78.06 – Unauthenticated Stored Cross-Site Scripting via Mailchimp Merge Field Values
The Connect Contact Form 7 and Mailchimp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mailchimp Merge Field Values in all versions up to, and including, 0.9.78.06 due to insufficient input sanitization and output escaping. This…
*-0.9.78.06
0.9.78.07
08/07/2026
Contact Form 7 Extension For Mailchimp <= 0.9.54 – Authenticated (Contributor+) Information Exposure
The Connect Contact Form 7 and Mailchimp plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.9.54. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract…
*-0.9.54
0.9.69
21/12/2025
Contact Form 7 Extension For Mailchimp <= 0.5.73 – Cross-Site Request Forgery
The Contact Form 7 Extension For Mailchimp plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.73. This is due to missing or incorrect nonce validation on a function. This makes…
*-0.5.73
0.9.19
26/04/2024
Contact Form 7 Extension For Mailchimp <= 0.5.70 – Authenticated (Subscriber+) Server-Side Request Forgery
The Contact Form 7 Extension For Mailchimp plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 0.5.70. This makes it possible for authenticated attackers, with subscriber-level access and above, to make…
*-0.5.70
0.9.19
08/01/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.