Threats tagged 'ghsa-qpwm-gvfh-p35v'

The MC4WP: Mailchimp for WordPress plugin versions before 4.15.0 contain a vulnerability where the plugin does not validate that the Mailchimp audience a sign-up form or bundled integration subscribes a visitor to matches the audience configured by the site owner. This flaw allows unauthenticated visitors to subscribe arbitrary email addresses to any audience within the site's connected Mailchimp account.