PT-2026-138476
CVE-2026-27356
·
Published
2026-11-06
·
Updated
2026-11-06
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
MC4WP versions prior to 4.14.2
Description
Missing authorization in the Mailchimp for WordPress plugin allows attackers to exploit incorrectly configured access control security levels. This occurs due to a missing capability check on a function, enabling unauthenticated attackers to perform unauthorized actions.
Recommendations
Update to a version newer than 4.14.1.
Found an issue in the description? Have something to add? Feel free to write us 👾