Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

CVE-2022-2556

MailChimp for Woocommerce < 2.7.2 - Admin+ SSRF

The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan private network for example

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Mailchimp
Products
Mailchimp For Woocommerce
CVE-2022-2267

MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF

The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users (such as subscriber) to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan private network for example

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Mailchimp
Products
Mailchimp For Woocommerce