CVE-2025-68989: Renzo Johnson Contact-Form-7-Mailchimp-Extension

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Insertion of Sensitive Information Into Sent Data vulnerability in Renzo Johnson contact-form-7-mailchimp-extension contact-form-7-mailchimp-extension allows Retrieve Embedded Sensitive Data.This issue affects contact-form-7-mailchimp-extension: from n/a through <= 0.9.68.

Affected products

• Renzo Johnson Contact-Form-7-Mailchimp-Extension: up to and including 0.9.68

Published 2025-12-30. Last modified 2026-10-07.