CVE-2021-36833中 4.8Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ibericode's MC4WP plugin <= 4.8.6 at WordPress.
CVE-2017-18577中 6.1The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg.