Yikesinc Easy Forms For Mailchimp
8 CVEs affecting Yikesinc Easy Forms For Mailchimp. Latest disclosed: 2024-01-15. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-15318 | Critical | 9.8 | 2019-08-22 | The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field. |
CVE-2023-2518 | Medium | 6.1 | 2023-05-30 | The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape a parameter before outputting it back in the page when the debug option… |
CVE-2023-1324 | Medium | 6.1 | 2023-04-24 | The Easy Forms for Mailchimp WordPress plugin before 6.8.8 does not sanitise and escape some parameters before outputting them back in the response, leading to… |
CVE-2021-24985 | Medium | 6.1 | 2022-01-24 | The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type parameters before outputting them back in… |
CVE-2023-23900 | Medium | 5.8 | 2023-08-10 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in YIKES, Inc. Easy Forms for Mailchimp plugin <= 6.8.8 versions. |
CVE-2023-1325 | Medium | 5.4 | 2023-04-17 | The Easy Forms for Mailchimp WordPress plugin before 6.8.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/… |
CVE-2023-4925 | Medium | 4.8 | 2024-01-15 | The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which could allow high privilege users such as… |
CVE-2023-1323 | Medium | 4.8 | 2023-06-12 | The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape some of its from parameters, which could allow high privilege users suc… |