CVE-2014-7152

MEDIUM 4.3CVE-2014-7152 · Published 26/09/2014 · updated 17/06/2026

In short

CVE-2014-7152 is a MEDIUM (CVSS 4.3) vulnerability affecting easy mailchimp forms plugin (mailchimp).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 80.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
easy mailchimp forms plugin mailchimp	`= 3.0= 4.0= 4.1= 4.2= 4.2.1= 4.3= 4.4= 5.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4= 5.0.5= 5.0.6`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Easy MailChimp Forms plugin 3.0 through 5.0.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the update_options action to wp-admin/admin-ajax.php.

References

research.g0blin.co.uk/cve-2014-7152 · Exploit
wordpress.org/plugins/yikes-inc-easy-mailchimp-extender/changelog

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free