Easy Forms for Mailchimp

Information

Software Type	Plugin
Software Slug	yikes-inc-easy-mailchimp-extender (view on wordpress.org)
Software Status	Active
Software Author	eherman24
Software Website	yikesplugins.com
Software Downloads	2,905,955
Software Active Installs	90,000
Software Record Last Updated	October 1, 2023

10 vulnerabilities

Easy Forms for Mailchimp <= 6.8.8 - Reflected Cross-Site Scripting

6.1

CVE-2023-2518

May 22, 2023

Researcher: Erwan LR

Easy Forms for Mailchimp <= 6.8.8 - Reflected Cross-Site Scripting via 'sql_error'

6.1

CVE-2023-23900

May 17, 2023

Researcher: Rafie Muhammad

Easy Forms for MailChimp <= 6.8.7 - Reflected Cross-Site Scripting

6.1

CVE-2023-1324

Mar 29, 2023

Researcher: Erwan LR

Easy Forms for MailChimp <= 6.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2023-1325

Mar 27, 2023

Researcher: Erwan LR

Easy Forms for Mailchimp <= 6.8.8 - Authenticated (Administrator+) Cross-Site Scripting via Form Name

4.4

CVE-2023-1323

Mar 9, 2023

Researcher: Chau Nguyen

Easy Forms for Mailchimp <= 6.8.5 - Reflected Cross-Site Scripting

6.1

CVE-2021-24985

Dec 21, 2021

Researcher: ZhongFu Su

Easy Forms for Mailchimp <= 6.6.2 - Authenticated Cross-Site Scripting

5.4

CVE ID Unknown

Mar 29, 2020

Researchers:

Easy Forms for Mailchimp <= 6.5.2 - Code Injection

9.8

CVE-2019-15318

Jul 1, 2019

Researcher: Henri Salo

Easy Forms for Mailchimp < 6.1 - Local File Inclusion

9.1

CVE ID Unknown

Jul 13, 2016

Researcher: Yorick Koster,

Easy Forms for Mailchimp 3.0 - 5.0.6 - Cross-Site Scripting

7.2

CVE-2014-7152

Sep 26, 2014

Researcher: James Hooker

Title	CVE ID	CVSS	Researchers	Date
Easy Forms for Mailchimp <= 6.8.8 - Reflected Cross-Site Scripting	CVE-2023-2518	6.1	Erwan LR	May 22, 2023
Easy Forms for Mailchimp <= 6.8.8 - Reflected Cross-Site Scripting via 'sql_error'	CVE-2023-23900	6.1	Rafie Muhammad	May 17, 2023
Easy Forms for MailChimp <= 6.8.7 - Reflected Cross-Site Scripting	CVE-2023-1324	6.1	Erwan LR	March 29, 2023
Easy Forms for MailChimp <= 6.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2023-1325	6.4	Erwan LR	March 27, 2023
Easy Forms for Mailchimp <= 6.8.8 - Authenticated (Administrator+) Cross-Site Scripting via Form Name	CVE-2023-1323	4.4	Chau Nguyen	March 9, 2023
Easy Forms for Mailchimp <= 6.8.5 - Reflected Cross-Site Scripting	CVE-2021-24985	6.1	ZhongFu Su	December 21, 2021
Easy Forms for Mailchimp <= 6.6.2 - Authenticated Cross-Site Scripting		5.4		March 29, 2020
Easy Forms for Mailchimp <= 6.5.2 - Code Injection	CVE-2019-15318	9.8	Henri Salo	July 1, 2019
Easy Forms for Mailchimp < 6.1 - Local File Inclusion		9.1	Yorick Koster,	July 13, 2016
Easy Forms for Mailchimp 3.0 - 5.0.6 - Cross-Site Scripting	CVE-2014-7152	7.2	James Hooker	September 26, 2014

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation