Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Koko Analytics HIGH 8.3
CVE-2026-22850

Koko Analytics is an open-source analytics plugin for WordPress. Versions prior to 2.1.3 are vulnerable to arbitrary SQL execution through unescaped …

Fix: 2.1.3+
Fix from $1,950 2026-01-19
Social Sharing MEDIUM 5.4
CVE-2024-9704

The Social Sharing (by Danny) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dvk_social_sharing' shortcode in al…

Fix: 1.3.8+
Fix from $1,600 2024-10-12
Mailchimp Top Bar MEDIUM 6.1
CVE-2024-9210

The MC4WP: Mailchimp Top Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate…

Fix: 1.6.1+
Fix from $1,600 2024-10-02
Koko Analytics MEDIUM 6.1
CVE-2024-8662

The Koko Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping …

Fix: 1.3.13+
Fix from $1,600 2024-09-24
Mailchimp MEDIUM 5.5
CVE-2024-8680

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and in…

Fix: 4.9.17+
Fix from $1,600 2024-09-21
Mailchimp MEDIUM 6.1
CVE-2024-8850

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email' parameter when a placeholder …

Fix: after 4.9.16
Fix from $1,600 2024-09-19
Mailchimp MEDIUM 5.3
CVE-2023-51682

Missing Authorization vulnerability in ibericode MC4WP.This issue affects MC4WP: from n/a through 4.9.9.

Fix: 4.9.10+
Fix from $1,600 2024-06-11
Mailchimp MEDIUM 6.1
CVE-2023-32517

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder.T…

Fix: 4.0.9.4+
Fix from $1,600 2023-12-29
Mailchimp For Wordpress MEDIUM 6.1
CVE-2017-18577

The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg.

Fix: 4.1.8+
Fix from $1,600 2019-08-22
Mailchimp For Wordpress MEDIUM 6.1
CVE-2016-10871

The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.

Fix: 4.0.11+
Fix from $1,600 2019-08-13