WordPress security by component
simple-membership-mailchimp-integration
simple-membership-mailchimp-integration is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Sep 02, 2026; the highest published CVSS base score is 5.4.
Plugin slug:
simple-membership-mailchimp-integrationLatest vulnerability
CVE-2026-8151: Simple Membership MailChimp settings can be replaced through cross-site requests
Simple Membership MailChimp Integration before 1.9.8 does not use CSRF protection on its settings page. An attacker can trick a logged-in Administrator into replacing the configured MailChimp API key, causing later member names, email addresses, and membership levels to be sent to an attacker-controlled account.
| Safe version |
|
||
|---|---|---|---|
| Sep 02, 2026 |
CVE-2026-8151
Simple Membership MailChimp settings can be replaced through cross-site requests
Simple Membership MailChimp Integration before 1.9.8 does not use CSRF protection on its settings page. An attacker can trick a logged-in Administrator into replacing the configured MailChimp API key, causing later member names, email addresses, and membership levels to be sent to an attacker-controlled account.
|
1.9.8 |
CVE5.4
|