Vulnerabilidades em MailMunch
12 resultadosAnálise Vexday
MailMunch apresenta 8 vulnerabilidades catalogadas sem indicadores de ataque ativo em circulação, reduzindo o risco imediato. Nenhuma falha crítica foi identificada e não há publicações recentes, sugerindo que o problema é legado. A fraqueza predominante (CWE-352, CSRF) indica deficiências em proteção contra falsificação de requisições entre sites, exigindo atenção em ambientes com autenticação sensível.
CVE-2023-40203MEDIUMWordPress MailChimp Forms by MailMunch plugin <= 3.1.4 - Broken Access ControlEPSS 0.6%CVE-2024-9614MEDIUMConstant Contact Forms by MailMunch <= 2.1.2 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2024-8735MEDIUMMailMunch – Grow your Email List <= 3.1.8 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2024-29793MEDIUMWordPress MailChimp Forms by MailMunch plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-31349MEDIUMWordPress MailMunch – Grow your Email List plugin <= 3.1.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-22137MEDIUMWordPress Constant Contact Forms by MailMunch Plugin <= 2.0.11 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2024-8726MEDIUMMailChimp Forms by MailMunch <= 3.2.3 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2026-7520HIGHMailChimp Forms by MailMunch <= 3.2.7 - Missing Authorization to Authenticated (Subscriber+) MailMunch Integration Takeover via 'sign_in' AJAX ActionEPSS 0.3%CVE-2024-31378MEDIUMWordPress MailChimp Forms by MailMunch plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2023-41852MEDIUMWordPress MailMunch – Grow your Email List Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2023-45748MEDIUMWordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2023-45647MEDIUMWordPress Constant Contact Forms by MailMunch Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%