mc4wp_mailchimp_for_wordpress vulnerabilities

CVEs whose affected-version data names the mc4wp_mailchimp_for_wordpress package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-87917Medium· 6.1

3d ago

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'data' Dynamic Content Tag in all versions up to, and including, 4.14.0 due to insufficient input sanitization and output escapin…

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'data' Dynamic Content Tag in all versions up to, and including, 4.14.0 due to insufficient input sanitization and output escapin…

▾ Sunlitdvankooten · MC4WP: Mailchimp for WordPressEPSS 0.21%via NVD