Vulnerabilities / MC4WP: Mailchimp for WordPress
MC4WP: Mailchimp for WordPress vulnerabilities
Advisories WPSec published for MC4WP: Mailchimp for WordPress. Other sources may list more. Its attack surface: MC4WP: Mailchimp for WordPress on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-04 | WPSEC-2026-2463 | MC4WP: Mailchimp for WordPress <= 4.14.1 - Unauthenticated Arbitrary Shortcode Execution via Dynamic Content Tags | High 7.3 | 4.15.0 |
| 2026-11-04 | WPSEC-2026-2462 | MC4WP: Mailchimp for WordPress <= 4.14.1 - Unauthenticated Insecure Direct Object Reference to Arbitrary Audience Subscription via '_mc4wp_lists' Parameter | Medium 5.3 | 4.15.0 |
License: CC BY 4.0