CVE-2026-92436

Name of the Vulnerable Software and Affected Versions Mailchimp for WooCommerce WordPress plugin versions prior to 6.3

Description An issue exists where the plugin fails to require authentication or verify ownership when loading a saved cart. An unauthenticated attacker who possesses a customer's email address can use a request-supplied identifier derived from that email to confirm the customer's shopping history at the store and access the contents of their saved cart.

Recommendations Update Mailchimp for WooCommerce WordPress plugin to version 6.3 or later.