Vulnerabilities (CVE)

Filtered by vendor Yikesinc Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-23900 1 Yikesinc 1 Easy Forms For Mailchimp 2023-08-15 N/A 6.1 MEDIUM
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in YIKES, Inc. Easy Forms for Mailchimp plugin <= 6.8.8 versions.
CVE-2022-28666 1 Yikesinc 1 Custom Product Tabs For Woocommerce 2023-08-02 N/A 5.3 MEDIUM
Broken Access Control vulnerability in YIKES Inc. Custom Product Tabs for WooCommerce plugin <= 1.7.7 at WordPress leading to &yikes-the-content-toggle option update.
CVE-2021-24985 1 Yikesinc 1 Easy Forms For Mailchimp 2022-01-27 4.3 MEDIUM 6.1 MEDIUM
The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues