WordPress MailChimp Forms by MailMunch plugin <= 3.1.4 - Broken Access Control
CVE-2023-40203

8.8HIGH

Key Information:

Vendor
WordPress
Status
Mailchimp Forms By Mailmunch
Vendor
CVE Published:
13 December 2024

Summary

A vulnerability exists in MailChimp Forms by MailMunch due to a missing authorization issue that allows attackers to exploit incorrectly configured access control security levels. This weakness can lead to unauthorized access to sensitive functionalities within the plugin, potentially compromising user data and functionality. The vulnerability impacts multiple versions of MailChimp Forms by MailMunch, making it crucial for users to apply appropriate security measures and updates to mitigate risks associated with this oversight.

Affected Version(s)

MailChimp Forms by MailMunch <= 3.1.4

References

https://patchstack.com/database/wordpress/plugin/mailchim...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

István Márton (Patchstack Alliance)
.