Pricing
Case studies
Login
Start trial
MC4WP
Danny van Kooten
Developer
4.14.0
Latest version
1,000,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
9 patched
4 Mitigation rules
Authenticated (Author+) Stored Cross-Site Scripting via Form Response Messages vulnerability
<= 4.12.0
7 hours ago
Missing Authorization to Unauthenticated Arbitrary Subscription Deletion vulnerability
<= 4.11.1
11/03/2026
Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
<= 4.9.16
23/09/2024
Reflected Cross-Site Scripting vulnerability
4.9.9-4.9.16
19/09/2024
Broken Access Control vulnerability
<= 4.9.9
27/12/2023
Authenticated Stored Cross-Site Scripting (XSS) vulnerability
<= 4.8.6
02/03/2022
Unauthorised Actions via Cross-Site Request Forgery (CSRF) vulnerability
<= 4.8.4
01/06/2021
Authenticated Arbitrary Redirect vulnerability
<= 4.8.4
01/06/2021
Cross Site Scripting
<= 4.0.10
09/12/2016