Vulnerabilities (CVE)

Filtered by vendor Yikesinc Subscribe
Filtered by product Easy Forms For Mailchimp
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-23900 1 Yikesinc 1 Easy Forms For Mailchimp 2023-08-15 N/A 6.1 MEDIUM
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in YIKES, Inc. Easy Forms for Mailchimp plugin <= 6.8.8 versions.
CVE-2021-24985 1 Yikesinc 1 Easy Forms For Mailchimp 2022-01-27 4.3 MEDIUM 6.1 MEDIUM
The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
CVE-2019-15318 1 Yikesinc 1 Easy Forms For Mailchimp 2020-08-24 7.5 HIGH 9.8 CRITICAL
The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field.