Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PluginOps MailChimp Subscribe Form plugin <= 4.0.9.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PluginOps | MailChimp Subscribe Form | ≤ 4.0.9.1 | — |
Medium · 5.9
CVE-2023-33328
EUVD-2023-37491GHSA-mr7g-6mvm-973v
WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.1 is vulnerable to Cross Site Scripting (XSS)
Published May 28, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack