Mailmunch

11 CVEs across 7 Mailmunch products. Browse Mailmunch vulnerabilities, severities, and proof-of-concept exploits.

Mailmunch products with known CVEs

ProductCVEs
Mailchimp Forms5
Mailchimp Forms By Mailmunch5
Constant Contact Forms3
Constant Contact Forms By Mailmunch3
Mailmunch3
Mailmunch – Grow Your Email List3
Mailmunch Forms For Mailchimp1
Mailmunch CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-7520High8.12026-08-05The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `sign_in()` a…
CVE-2023-40203Medium4.32024-12-13Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…
CVE-2024-8735Medium6.12024-11-22The MailMunch – Grow your Email List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate e…
CVE-2024-8726Medium6.12024-11-20The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escap…
CVE-2024-9614Medium6.12024-11-13The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriat…
CVE-2024-31378Medium5.42024-04-15Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailChimp Forms by MailMunch.This issue affects MailChimp Forms by MailMunch: from n/a through 3.2…
CVE-2024-31349Medium6.52024-04-07Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch MailMunch – Grow your Email List allows Stored…
CVE-2024-29793Medium6.52024-03-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch MailChimp Forms by MailMunch allows Stored XSS…
CVE-2024-22137Medium6.52024-01-13Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch Constant Contact Forms by MailMunch allows Stor…
CVE-2023-45748Medium4.32023-10-16Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailChimp Forms by MailMunch plugin <= 3.1.4 versions.
CVE-2023-45647Medium5.42023-10-16Cross-Site Request Forgery (CSRF) vulnerability in MailMunch Constant Contact Forms by MailMunch plugin <= 2.0.10 versions.
CVE-2023-41852Medium4.32023-10-10Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailMunch – Grow your Email List plugin <= 3.1.2 versions.