MC4WP: Mailchimp for WordPress

MC4WP: Mailchimp for WordPress has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; all 12 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 7 of the records (58%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).

Every one of the 12 issues recorded for MC4WP: Mailchimp for WordPress has a vendor fix available, so running the current release closes all known holes.

8 independent researchers contributed these findings, most of them (2) reported by WPScanTeam. MC4WP: Mailchimp for WordPress is installed on roughly 1,000,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

12

Get automatic notifications for all MC4WP: Mailchimp for WordPress vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8

MC4WP: Mailchimp for WordPress <= 4.8.4 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

12 records
2026-08-21 00:00CVE-2026-4561
6.4
Medium
Osvaldo Noe Gonzalez Del Rio (Os)Yes
2026-03-10 13:11CVE-2026-1781
6.5
Medium
Sarawut Poolkhet (MisterHelloz)Yes
2024-09-20 20:24CVE-2024-8680
4.4
Medium
Jorge Diaz (ddiax)Yes
2024-09-18 00:00CVE-2024-8850
6.1
Medium
kauenavarroYes
2023-12-27 00:00CVE-2023-51682
5.3
Medium
Rafie MuhammadYes
2022-03-02 07:15CVE-2021-36833
5.5
Medium
Asif Nawaz MinhasYes
2022-03-02 00:00N/A
5.5
Medium
AnonymousYes
2021-06-01 00:00N/A
8.8
High
WPScanTeamYes
2021-06-01 00:00N/A
6.1
Medium
WPScanTeamYes
2019-11-09 00:00N/A
6.1
Medium
RIPS TechnologiesYes
Showing 1–10 of 12 reports
MC4WP: Mailchimp for WordPress banner
Latestv4.14.1

MC4WP: Mailchimp for WordPress

Danny van Kooten

Author

Danny van Kooten

4.8(1,497)
96/100
Last Updated
2026-09-10 (3d ago)
Active Installs
1,000,000+
Downloads
78,069,928
Requires WP
5.3+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2013-06-19 (13y ago)

Allowing your visitors to subscribe to your newsletter should be easy. With this plugin, it finally is. This plugins helps you grow your email list in Mailchimp. You can use it to create good looking and accessible sign-up forms or integrate with any other existing form on your WordPress site, like your contact, comment or checkout form. Some (but not all) features Connect with your Mailchimp account in seconds. Sign-up forms which are good looking, user-friendly and mobile optimized. You have complete control over the form fields and can build your forms using native HTML. Seamless integration with the following plugins: WordPress Comment Form WordPress Registration Form Contact Form 7 WooCommerce Gravity Forms Ninja Forms 3 WPForms BuddyPress MemberPress Events Manager Easy Digital Downloads Give UltimateMember HTML Forms AffiliateWP Is the plugin you want to integrate with not listed above? You can probably still use our custom integration feature. Alternatively, the plugin comes with a PHP API to programmatically add a new subscriber to Mailchimp. Mailchimp for WordPress Premium: Send your WooCommerce orders to Mailchimp so you can see exactly what each subscriber purchased and how much revenue your email campaigns are generating. A multitude of available add-on plugins and integrations: Mailchimp for WordPress Premium Mailchimp Top Bar Boxzilla Pop-ups Well documented through our knowledge base. Developer friendly. For some inspiration, check out our repository of example code snippets. Ready for PHP 8.5, but backwards-compatible all the way down to PHP 7.4. What is Mailchimp? Mailchimp is a newsletter service that allows you to send out email campaigns to a list of email subscribers. It is free for lists with up to 500 email subscribers, which is why it is the newsletter-service of choice for thousands of small businesses across the globe. If you are not yet using Mailchimp, creating an account is 100% free and only takes you about 30 seconds. Support If you need some help in setting up the plugin, you have various options: Search through our knowledge base. Open a topic in the WordPress.org plugin support forums If you’re a premium user, send an email to the email address listed inside the plugin. Translations You can help translate this plugin into your language using your WordPress.org account. Development This plugin is being developed on GitHub. If you want to collaborate, please look at ibericode/mailchimp-for-wordpress. Customizing the plugin The plugin provides various filter and action hooks that allow you to modify or extend the default behavior. We’re also maintaining a collection of sample code snippets.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C