CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-31378 – WordPress MailChimp Forms by MailMunch plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability
https://notcve.org/view.php?id=CVE-2024-31378
10 Apr 2024 — Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailChimp Forms by MailMunch.This issue affects MailChimp Forms by MailMunch: from n/a through 3.2.1. Vulnerabilidad de Cross-Site Request Forgery (CSRF) en MailMunch MailChimp Forms de MailMunch. Este problema afecta a MailChimp Forms de MailMunch: desde n/a hasta 3.2.1. The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.1. This is due to missing or incorrect non... • https://patchstack.com/database/vulnerability/mailchimp-forms-by-mailmunch/wordpress-mailchimp-forms-by-mailmunch-plugin-3-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-29793 – WordPress MailChimp Forms by MailMunch plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability
https://notcve.org/view.php?id=CVE-2024-29793
25 Mar 2024 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch MailChimp Forms by MailMunch allows Stored XSS.This issue affects MailChimp Forms by MailMunch: from n/a through 3.2.2. La vulnerabilidad de neutralización inadecuada de la entrada durante la generación de páginas web ('cross-site Scripting') en MailMunch MailChimp Forms de MailMunch permite XSS almacenado. Este problema afecta a MailChimp Forms de MailMunch: desde n/a hasta 3.2.2. The MailChimp F... • https://patchstack.com/database/vulnerability/mailchimp-forms-by-mailmunch/wordpress-mailchimp-forms-by-mailmunch-plugin-3-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2023-40203 – WordPress MailChimp Forms by MailMunch plugin <= 3.1.4 - Broken Access Control
https://notcve.org/view.php?id=CVE-2023-40203
11 Aug 2023 — Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailChimp Forms by MailMunch: from n/a through 3.1.4. The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'delete_widget', 'change_email_status', and 'delete_email' AJAX functions in versions up to, and including, 3.1.4. This makes ... • https://patchstack.com/database/wordpress/plugin/mailchimp-forms-by-mailmunch/vulnerability/wordpress-mailchimp-forms-by-mailmunch-plugin-3-1-4-broken-access-control?_s_id=cve • CWE-862: Missing Authorization •