Veille CVE
Recherche « Unknown Simple Membership MailChimp Integration »
1 CVE
Critique 0
Élevée 0
Moyenne 1
Faible 0
Non évaluée 0
Exploitées (KEV)
Tri : plus récentes
« Unknown Simple Membership MailChimp Integration » ✕
-
CVE-2026-8151 5.4 Moyenne
Unknown Simple Membership MailChimp Integration
The Simple Membership MailChimp Integration WordPress plugin before 1.9.8 does not have CSRF checks in its settings page, allowing attackers to trick a logged-in administrator into changing the configured third-party API key. Once replaced, all subsequent member registration data (name, email, membership level) is sent to the attacker-controlled account.