Skip to content
OpenAdvisories

Vendor

ibericode

5 known vulnerabilities.

Products

MC4WP 2 MC4WP: Mailchimp for WordPress 1 HTML Forms 1 koko-analytics 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-27356

    WordPress MC4WP plugin <= 4.14.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ibericode MC4WP mailchimp-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MC4WP: from n/a through 4.14.1.

    ibericode MC4WP
  • Medium 5.3
    CVE-2023-51682

    WordPress MC4WP plugin <= 4.9.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ibericode MC4WP.This issue affects MC4WP: from n/a through 4.9.9.

    ibericode MC4WP
  • Medium 5.9
    CVE-2023-50836

    WordPress HTML Forms Plugin <= 1.3.28 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ibericode HTML Forms allows Stored XSS.This issue affects HTML Forms: from n/a through 1.3.28.

    ibericode HTML Forms
  • Medium 4.8
    CVE-2021-36833

    WordPress MC4WP plugin <= 4.8.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ibericode's MC4WP plugin <= 4.8.6 at WordPress.

    ibericode MC4WP: Mailchimp for WordPress Web / CMS