CVE-2021-36833

概要

参考情報

• patchstack.com/database/vulnerability/mailchimp-for-wp/wordpress-mc4wp-plugin-4-8-6-authenticated-stored-cross-site-scripting-xss-vulnerability · Third Party Advisory
• wordpress.org/plugins/mailchimp-for-wp · Product

mailchimp for wordpress のその他の脆弱性

• CVE-2017-18577中 6.1The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg.
• CVE-2016-10871中 6.1The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.