Block For Mailchimp Vulnerabilities

The Block for Mailchimp – Add Email Subscription Forms and Collect Leads plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.1.15. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 1.1.15

Fixed in:

1.1.16

Disclosed:

Jun 25, 2026

CVE-2026-56063 on NVD →

The Block For Mailchimp – Easy Mailchimp Form Integration plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.12 via the mcbSubmit_Form_Data(). This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from...

CVSS:

4

Affected:

up to 1.1.12

Fixed in:

1.1.13

Disclosed:

Sep 30, 2025

CVE-2025-10735 on NVD →