Medium · 5.9 CVE-2024-43211 EUVD-2024-40652GHSA-j5w7-63fj-6h4c

WordPress MailChimp Subscribe Form plugin <=4.0.9.9 - Stored Cross-Site Scripting vulnerability

Published Nov 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: PluginOps Product: MailChimp Subscribe Forms

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through 4.0.9.9.

Affected products

Vendor	Product	Affected	Fixed
PluginOps	MailChimp Subscribe Forms	≤ 4.0.9.9	—

References

https://patchstack.com/database/vulnerability/mailchimp-subscribe-sm/wordpress-mailchimp-subscribe-form-plugin-4-0-9-8-multiple-vulnerabilities-vulnerability?_s_id=cve vdb-entry