MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder

Information

Software Type Plugin
Software Slug mailchimp-subscribe-sm (view on wordpress.org)
Software Status Active
Software Author umarbajwa
Software Website pluginops.com
Software Downloads 455,208
Software Active Installs 2,000
Software Record Last Updated September 14, 2026

7 Vulnerabilities

Submit a Vulnerability
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder <= 4.3.3 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-27536
Aug 11, 2026
Researcher: Nguyen Dinh Hai (HaiND)
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder <= 4.3.3 - Unauthenticated Stored Cross-Site Scripting via Form Field Values
7.2
CVE-2026-15052
Jul 31, 2026
Researcher: she11f
MailChimp Subscribe Forms <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-22727
Jan 15, 2025
Researcher: Peter Thaleikis
MailChimp Subscribe Forms <= 4.0.9.7 - Authenticated (Editor+) Stored Cross-Site Scripting
4.4
CVE-2024-43211
Aug 9, 2024
Researcher: Steven Julian
MailChimp Subscribe Forms <= 4.0.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-33328
May 22, 2023
Researcher: Rio Darmawan
MailChimp Subscribe Forms <= 4.0.9.3 - Open Redirect
6.1
CVE-2023-32517
May 10, 2023
Researcher: minhtuanact
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder < 1.2 - Remote Code Execution
8.8
CVE ID Unknown
Apr 21, 2015
Researcher: woodspeed
Title Status CVE ID CVSS Researchers Date
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder <= 4.3.3 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-27536 7.2 Nguyen Dinh Hai (HaiND) August 11, 2026
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder <= 4.3.3 - Unauthenticated Stored Cross-Site Scripting via Form Field Values Patched CVE-2026-15052 7.2 she11f July 31, 2026
MailChimp Subscribe Forms <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-22727 6.4 Peter Thaleikis January 15, 2025
MailChimp Subscribe Forms <= 4.0.9.7 - Authenticated (Editor+) Stored Cross-Site Scripting Patched CVE-2024-43211 4.4 Steven Julian August 9, 2024
MailChimp Subscribe Forms <= 4.0.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2023-33328 4.4 Rio Darmawan May 22, 2023
MailChimp Subscribe Forms <= 4.0.9.3 - Open Redirect Patched CVE-2023-32517 6.1 minhtuanact May 10, 2023
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder < 1.2 - Remote Code Execution Patched 8.8 woodspeed April 21, 2015

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation