{
 "id": "WPSEC-2026-2462",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2462/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2462/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2462/index.md",
 "title": "MC4WP: Mailchimp for WordPress <= 4.14.1 - Unauthenticated Insecure Direct Object Reference to Arbitrary Audience Subscription via '_mc4wp_lists' Parameter",
 "description": "The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference via the '_mc4wp_lists' parameter in all versions up to, and including, 4.14.1. This is due to sign-up form submissions and integrations (such as the comment form, registration form and Contact Form 7) accepting user-supplied Mailchimp list IDs without checking that the site owner selected those lists for that form or integration. This makes it possible for unauthenticated attackers to subscribe arbitrary email addresses to any audience in the connected Mailchimp account.",
 "plugin": {
  "slug": "mailchimp-for-wp",
  "name": "MC4WP: Mailchimp for WordPress",
  "full_name": "MC4WP: Mailchimp for WordPress",
  "wordpress_org": "https://wordpress.org/plugins/mailchimp-for-wp/",
  "advisories_url": "https://wpsec.com/vuln/plugin/mailchimp-for-wp/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/mailchimp-for-wp"
 },
 "type": "IDOR",
 "cwe": [
  "CWE-639"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "4.15.0",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 4.15.0"
  ]
 },
 "introduced_in": null,
 "fixed_in": "4.15.0",
 "remediation": "Update to 4.15.0 or later.",
 "fix_released": "2026-11-03T10:05:41+00:00",
 "published": "2026-11-04T10:54:55+00:00",
 "updated": "2026-11-03T13:31:15.450790+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2462/",
  "https://plugins.svn.wordpress.org/mailchimp-for-wp/tags/4.15.0/",
  "https://wordpress.org/plugins/mailchimp-for-wp/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/mailchimp-for-wp",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "High",
  "affected_versions": "High",
  "as_of": "2026-11-04"
 }
}