EUVD-2026-57911
GHSA-227m-w7gv-633p
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
Administrator authentication required (PR:H) to reach injection point; S:C reflects read access across shared WordPress database tables beyond plugin scope.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
Lifecycle Timeline
3DescriptionCVE.org
Administrator SQL Injection in MailChimp For WooCommerce < 6.2 versions.
AnalysisAI
SQL injection in the MailChimp For WooCommerce WordPress plugin (all versions prior to 6.2) allows authenticated administrators to submit unsanitized input through the plugin's administrative interface, triggering arbitrary database queries against the underlying WordPress database. The CVSS scope change (S:C) indicates that successful exploitation reaches beyond the plugin's own data, potentially exposing customer PII, order records, and other WooCommerce data stored in shared database tables. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an active WordPress administrator session (PR:H per CVSS vector) - the highest privilege tier in a WordPress installation, above shop manager, editor, and subscriber roles. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.6 High score is driven primarily by the scope change (S:C) and high confidentiality impact (C:H), but PR:H fundamentally constrains real-world exploitability - only authenticated WordPress administrators can reach the vulnerable endpoint, which significantly narrows the attack surface to insider threats, compromised credentials, or session hijacking scenarios. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has acquired WordPress administrator credentials - through phishing, credential stuffing against reused passwords, or a compromised admin session - logs into the WordPress admin panel and navigates to the MailChimp For WooCommerce plugin settings or management pages. The attacker submits a crafted request containing SQL metacharacters in a vulnerable parameter, causing the plugin to execute an attacker-controlled database query. … |
| Remediation | Upgrade the MailChimp For WooCommerce plugin to version 6.2 or later; this is the vendor-confirmed fix version per the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/mailchimp-for-woocommerce/vulnerability/wordpress-mailchimp-for-woocommerce-plugin-6-2-sql-injection-vulnerability. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: conduct a comprehensive audit of all WordPress administrator accounts and review recent activity logs for unauthorized database queries or suspicious administrative actions. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Mailchimp For Woocommerce
View allThe Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users (such as
The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perfo
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today