CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
The Mailchimp List Subscribe Form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0. This is due to missing or incorrect nonce validation on the mailchimp_sf_change_list_if_necessary() function. This makes it possible for unauthenticated attackers to change Mailchimp lists via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Explanation of Vulnerability in Simple Terms
The Mailchimp List Subscribe Form contains a cross-site request forgery (CSRF) vulnerability affecting versions up to 2.0.0. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the form settings without the admin's knowledge or consent. The vulnerability requires user interaction and does not expose sensitive data, but can result in unauthorized modifications to subscription forms.
What an attacker can do
Trick a site admin into modifying form settings or subscription lists without their knowledge.
Potential impact on your site
Form configuration could be altered by attackers without your consent or awareness.
Conditions required to exploit
Admin must visit a malicious webpage while logged into the site.
Key dates
External resources
