Non notée
CVE-2022-2267 The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users (such…
Description
The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users (such as subscriber) to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan private network for example
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Mailchimp for WooCommerce 2.7 | premières → < 2.7.1 | 2.7.1 |
Autres CVE de Mailchimp for WooCommerce
Les 5 CVE de Mailchimp for WooCommerce →
CVE-2026-92437
The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication, a nonce or an ownership check…
5.3
Moyenne
CVE-2026-92436
The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication or verify ownership before…
5.3
Moyenne
CVE-2026-92435
The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the…
5.3
Moyenne
CVE-2022-2556
The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to…
Non notée