CVE-2021-36833: Ibericode Mailchimp For WordPress

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ibericode's MC4WP plugin <= 4.8.6 at WordPress.

Affected products

• Ibericode Mailchimp For WordPress: up to and including 4.8.6

Published 2022-05-20. Last modified 2026-06-17.