CVE-2026-118167
MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Subscription Audience Override
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The MC4WP: Mailchimp for WordPress plugin before 4.15.0 does not validate that the Mailchimp audience a sign-up form or bundled integration subscribes a visitor to matches the audience configured by the site owner, allowing unauthenticated visitors to subscribe arbitrary email addresses to any other audience in the site's connected Mailchimp account.
| Vendor | unknown |
| Product | mc4wp: mailchimp for wordpress |
| Published | Nov 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown mc4wp: mailchimp for wordpress
Be the first to know when new unknown vulnerabilities affecting unknown mc4wp: mailchimp for wordpress are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / MC4WP: Mailchimp for WordPress
0 < 4.15.0
References
Credits
Karthik Ramakrishnan WPScan