Monitor free

Report

New Known

Exploited

Fixed

WordPress Mailchimp for WooCommerce plugin <= 2.7.1 - Authenticated Server-Side Request Forgery (SSRF) vulnerability

4.1

CVSS 3.1 score Medium severity

Report

Monitoring Monitoring Known to be exploited Coming soon

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

MailChimp For WooCommerce

Type

Plugin

Vulnerable versions

<= 2.7.1

Fixed in

2.7.2

PSID

c951eb30995d

CVE ID

CVE-2022-2556

Classification

Server Side Request Forgery (SSRF)

OWASP Top 10

A1: Injection

Required privilege

Requires high role user authentication like admin.

Credits

Miguel Xavier Penha Neto

Publicly disclosed

2022-08-03

Patchstack vPatch available since

09.12.2021

Details

Authenticated Server-Side Request Forgery (SSRF) vulnerability discovered by Miguel Xavier Penha Neto in WordPress Mailchimp for WooCommerce plugin (versions <= 2.7.1).

Solution

Update the WordPress MailChimp For WooCommerce plugin to the latest available version (at least 2.7.2).

References