Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mailchimp mailchimp for woocommerce vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv3
CVE-2022-2267
The Mailchimp for WooCommerce WordPress plugin prior to 2.7.1 has an AJAX action that allows any logged in users (such as subscriber) to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can ...
Mailchimp Mailchimp For Woocommerce
2.7
CVSSv3
CVE-2022-2556
The Mailchimp for WooCommerce WordPress plugin prior to 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan priv...
Mailchimp Mailchimp For Woocommerce
4.3
CVSSv3
CVE-2019-16251
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework up to and including 3.3.8 for WordPress allows authenticated options changes.
Yithemes Yith Woocommerce WishlistYithemes Yith Woocommerce CompareYithemes Yith Woocommerce Quick ViewYithemes Yith Woocommerce Zoom MagnifierYithemes Yith Woocommerce Ajax SearchYithemes Yith Woocommerce Badge ManagementYithemes Yith Woocommerce Brands Add-onYithemes Yith Woocommerce Request A QuoteYithemes Yith Woocommerce Social LoginYithemes Yith Woocommerce Order TrackingYithemes Yith Woocommerce Pdf Invoice And Shipping ListYithemes Yith Pre-order For WoocommerceYithemes Yith Woocommerce Advanced ReviewsYithemes Yith Woocommerce Product Add-onsYithemes Yith Woocommerce Gift CardsYithemes Yith Woocommerce SubscriptionYithemes Yith Woocommerce AffiliatesYithemes Yith Woocommerce Cart MessagesYithemes Yith Woocommerce Product BundlesYithemes Yith Woocommerce Frequently Bought TogetherYithemes Yith Woocommerce Multi-step CheckoutYithemes Yith Color And Label Variations For Woocommerce
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4651CVE-2024-34255elevation of privilegeCVE-2024-25529CVE-2024-4671NULL pointer dereferenceCVE-2024-25527template injectionCVE-2008-0166
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook