EUVD-2026-39717
GHSA-h75p-rhw9-w8q8
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Unauthenticated, low-complexity network access to an endpoint missing authorization (AV:N/AC:L/PR:N/UI:N); scope change and bounded low impact mirror the source vector.
Primary rating from Vendor (patchstack).
CVSS VectorVendor: patchstack
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Lifecycle Timeline
1DescriptionCVE.org
Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions.
AnalysisAI
Broken access control in the WordPress "MailChimp Block" plugin (versions 1.1.15 and earlier) lets unauthenticated remote attackers invoke protected plugin functionality without any authorization check, per the CVSS:3.1 vector (AV:N/PR:N/UI:N) and Patchstack's CWE-862 classification. The scope-changed vector (S:C) with low confidentiality, integrity, and availability impact indicates the missing authorization can affect resources beyond the vulnerable component itself. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The target must be running the WordPress "MailChimp Block" plugin at version 1.1.15 or earlier and have the affected endpoint reachable over the network. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are partially conflicting and incomplete. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker sends a crafted HTTP request directly to the plugin's unprotected AJAX or REST action on a target WordPress site, invoking functionality that should require authorization. Because no privileges or user interaction are needed (AV:N/PR:N/UI:N) and complexity is low, the request succeeds against any site running version 1.1.15 or earlier, producing the low-level confidentiality, integrity, or availability effect across the scope-changed boundary. … |
| Remediation | No vendor-released patch version is identified in the available data; the input only confirms that versions up to and including 1.1.15 are vulnerable. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all WordPress installations using MailChimp Block plugin v1.1.15 or earlier through plugin audit tools or hosting provider reports. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today