MC4WP: Mailchimp for WordPress

Vulnerabilities 18Slug mailchimp-for-wpLatest version 4.12.5WordPress.org →

Minimum safe version

4.12.0

Update to 4.12.0 or later to address 17 fixable vulnerabilities

Latest available4.12.5 ✓Affected up to4.9.16 ⚠
N/A
2026-03-10< 4.12.0

MC4WP: Mailchimp for WordPress <= 4.11.1 - Missing Authorization to Unauthenticated Arbitrary Subscription Deletion

WordfenceCVE
Medium 5.5
2024-09-23< 4.9.17

WordPress MC4WP Plugin <= 4.9.16 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfence
N/A
< 4.1.7

MailChimp for WordPress &lt;= 4.1.6 - Authenticated Cross-Site Scripting (XSS)

WPScan
N/A
< 4.8.5

MC4WP: Mailchimp for WordPress &lt; 4.8.5 - Unauthorised Actions via CSRF

WPScan
N/A
< 4.8.5

MC4WP: Mailchimp for WordPress &lt; 4.8.5 - Authenticated Arbitrary Redirect

WPScan
N/A
< 4.8.7

MC4WP &lt; 4.8.7 - Admin+ Stored Cross-Site Scripting

WPScan
N/A
2019-11-09< 4.1.7

MC4WP: Mailchimp for WordPress <= 4.1.6 - Reflected Cross-Site Scripting

Wordfence
N/A
2021-06-01< 4.8.5

MC4WP: Mailchimp for WordPress <= 4.8.4 - Open Redirect

Wordfence
N/A
2021-06-01< 4.8.5

MC4WP: Mailchimp for WordPress <= 4.8.4 - Cross-Site Request Forgery

Wordfence
N/A
2022-03-02< 4.8.7

MC4WP: Mailchimp for WordPress < 4.8.7 - Cross-Site Scripting

Wordfence
N/A
2016-12-09< 4.0.11

WordPress MailChimp Plugin <= 4.0.10 - Cross Site Scripting

Patchstack
N/A
2021-06-01< 4.8.5

WordPress MC4WP plugin <= 4.8.4 - Authenticated Arbitrary Redirect vulnerability

Patchstack
N/A
2021-06-01< 4.8.5

WordPress MC4WP plugin <= 4.8.4 - Unauthorised Actions via Cross-Site Request Forgery (CSRF) vulnerability

Patchstack