Skip to content
OpenAdvisories

Vendor

mailmunch

13 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.1

    WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability

    Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 versions.

  • High 8.1

    MailChimp Forms by MailMunch <= 3.2.7 - Missing Authorization to Authenticated (Subscriber+) MailMunch Integration Takeover via 'sign_in' AJAX Action

    The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `sign_in()` and `sign_up()` AJAX handlers in all versions up to, and including, 3.2.7. This makes it possible for…