Medium · 4.3 CVE-2024-33677 EUVD-2024-31389GHSA-v9pm-5x6v-2p6p

WordPress Contact Form 7 Extension For Mailchimp plugin <= 0.5.70 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 26, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Renzo Johnson Product: Contact Form 7 Extension For Mailchimp

Description

Cross-Site Request Forgery (CSRF) vulnerability in Renzo Johnson Contact Form 7 Extension For Mailchimp.This issue affects Contact Form 7 Extension For Mailchimp: from n/a through 0.5.70.

Affected products

Vendor	Product	Affected	Fixed
Renzo Johnson	Contact Form 7 Extension For Mailchimp	≤ 0.5.70	—

References

https://patchstack.com/database/vulnerability/contact-form-7-mailchimp-extension/wordpress-contact-form-7-extension-for-mailchimp-plugin-0-5-70-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry