Ibericode

12 CVEs across 9 Ibericode products. Browse Ibericode vulnerabilities, severities, and proof-of-concept exploits.

Ibericode products with known CVEs

ProductCVEs
Mailchimp4
Mailchimp For WordPress3
Koko Analytics2
HTML Forms1
Koko-Analytics1
Mailchimp Top Bar1
Mc4wp1
Mc4wp: Mailchimp For WordPress1
Social Sharing1
Ibericode CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-22850High8.32026-01-19Koko Analytics is an open-source analytics plugin for WordPress. Versions prior to 2.1.3 are vulnerable to arbitrary SQL execution through unescaped analytics…
CVE-2024-9704Medium6.42024-10-12The Social Sharing (by Danny) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dvk_social_sharing' shortcode in all versions…
CVE-2024-9210Medium6.12024-10-02The MC4WP: Mailchimp Top Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping…
CVE-2024-8662Medium6.12024-09-24The Koko Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL…
CVE-2024-8680Medium4.42024-09-21The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4…
CVE-2024-8850Medium6.12024-09-19The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email' parameter when a placeholder such as {e…
CVE-2023-51682Medium5.32024-06-11Missing Authorization vulnerability in ibericode MC4WP.This issue affects MC4WP: from n/a through 4.9.9.
CVE-2023-32517Medium4.72023-12-29URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder.This issue…
CVE-2023-50836Medium5.92023-12-28Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ibericode HTML Forms allows Stored XSS.This issue affects…
CVE-2021-36833Medium4.82022-05-20Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ibericode's MC4WP plugin <= 4.8.6 at WordPress.
CVE-2017-18577Medium6.12019-08-22The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg.
CVE-2016-10871Medium6.12019-08-13The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.