Extension WordPress
Vulnérabilités MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
Cette page rassemble les failles publiées pour MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
5 fiches
MailChimp Subscribe Forms <= 4.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The MailChimp Subscribe Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access…
*-4.1
4.2
15/01/2025
MailChimp Subscribe Forms <= 4.0.9.7 – Authenticated (Editor+) Stored Cross-Site Scripting
The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 4.0.9.7 due to insufficient input sanitization and output escaping. This…
*-4.0.9.7
4.0.9.8
09/08/2024
MailChimp Subscribe Forms <= 4.0.9.1 – Authenticated (Administrator+) Stored Cross-Site Scripting
The MailChimp Subscribe Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 4.0.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-4.0.9.1
4.0.9.2
22/05/2023
MailChimp Subscribe Forms <= 4.0.9.3 – Open Redirect
The MailChimp Subscribe Forms plugin for WordPress is vulnerable to Open Redirect in versions up to, and including, 4.0.9.3. This is due to the application failing to properly verify a user-supplied input parameter. This makes it possible for…
*-4.0.9.3
4.0.9.4
10/05/2023
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder < 1.2 – Remote Code Execution
The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder theme for WordPress is vulnerable to Remote Code Execution in versions before 1.2 via the email field. This allows authenticated attackers to execute code on the server.
[*, 1.2)
1.2
21/04/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.