Ibericode Mailchimp For Wordpress — known CVE vulnerabilities

Every CVE whose affected-product data names Ibericode Mailchimp For Wordpress, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2016-10871 — CVSS 6.1 (medium): The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.
• CVE-2017-18577 — CVSS 6.1 (medium): The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg.
• CVE-2021-36833 — CVSS 4.8 (medium): Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ibericode's MC4WP plugin <= 4.8.6 at WordPress.