PT-2026-95794 · WordPress · Mc4Wp: Mailchimp For Wordpress

Nism0

·

CVE-2026-87917

·

Published

2026-09-19

·

Updated

2026-09-19

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions MC4WP: Mailchimp for WordPress versions prior to 4.14.1
Description Insufficient input sanitization and output escaping in the data Dynamic Content Tag allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs when an attacker tricks a user into clicking a malicious link, leading to the execution of arbitrary web scripts in the user's browser.
Recommendations Update MC4WP: Mailchimp for WordPress to version 4.14.1 or later.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-87917

Affected Products

Mc4Wp: Mailchimp For Wordpress