Approved changes feed: RSS · Atom

cpe:2.3:a:bplugins:block_for_mailchimp_–_add_email_subscription_forms_and_collect_leads:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBplugins (d23d5d08-ee04-5724-85c5-d147aa9863c7)
ProductBlock For Mailchimp – Add Email Subscription Forms And Collect Leads (14ccfa91-5ced-52ef-b646-a153caddd738)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10735 vulnerable 2026-06-08 07:02:27.430521 Block For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request Forgery
MEDIUM (4)
The Block For Mailchimp – Easy Mailchimp Form Integration plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.12 via the mcbSubmit_Form_Data(). This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
Published: 2025-10-01T03:25:23.454Z
Updated: 2026-04-08T16:52:39.004Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.