CVE-2023-32517: WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.3 is vulnerable to Open Redirection
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder.This issue affects MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder: from n/a through 4.0.9.3.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32517?
CVE-2023-32517 is rated as a high severity vulnerability due to its potential for exploitation via open redirects.
How do I fix CVE-2023-32517?
To fix CVE-2023-32517, upgrade the affected MailChimp plugins to version 4.0.9.4 or later.
What are the affected versions of CVE-2023-32517?
CVE-2023-32517 affects MailChimp Subscribe Form, Optin Builder, PopUp Builder, and Form Builder versions up to 4.0.9.3.
What types of attacks are possible with CVE-2023-32517?
CVE-2023-32517 can lead to phishing attacks by redirecting users to untrusted sites.
Who is affected by CVE-2023-32517?
Users of the affected MailChimp plugins on WordPress versions up to 4.0.9.3 are at risk of CVE-2023-32517.