Advisories · Technology
Mailchimp for WooCommerce.
Every CVE that names Mailchimp for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Mailchimp for WooCommerce < 6.3 - Unauthenticated Abandoned Cart Modification and Deletion
- Mailchimp for WooCommerce
- Broken access control
- CVSS 5.3 Medium
Mailchimp for WooCommerce < 6.3 - Unauthenticated Customer Email and Cart Disclosure via IDOR
- Mailchimp for WooCommerce
- Broken access control
- CVSS 5.3 Medium
Mailchimp for WooCommerce < 6.1.1 - Unauthenticated Broken Access Control in REST API
- Mailchimp for WooCommerce
- Broken access control
- CVSS 7.6 High
WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability
- MailChimp For WooCommerce
- SQL injection
-
MailChimp for Woocommerce < 2.7.2 - Admin+ SSRF
- Mailchimp for WooCommerce
- Server-side request forgery (SSRF)
-
MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF
- Mailchimp for WooCommerce
- Server-side request forgery (SSRF)