Skip to content
OpenAdvisories

Vendor

rnzo

2 known vulnerabilities.

Products

Connect Contact Form 7 and Mailchimp 1 Connect Contact Form 7 and AWeber 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-15000

    Connect Contact Form 7 and Mailchimp <= 0.9.78.06 - Unauthenticated Stored Cross-Site Scripting via Mailchimp Merge Field Values

    The Connect Contact Form 7 and Mailchimp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mailchimp Merge Field Values in all versions up to, and including, 0.9.78.06 due to insufficient input sanitization and output escaping. This makes …

    rnzo Connect Contact Form 7 and Mailchimp Web / CMS