EUVD-2026-83517
GHSA-qc48-4x35-wh3c
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
REST routes are reachable remotely with no auth (AV:N/PR:N/UI:N) and the permission callback simply fails to check capability (AC:L); impact is a persistent state change only, so I:L with C:N/A:N.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
Lifecycle Timeline
4DescriptionCVE.org
The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required capability in the permission callback for several of its REST API routes, allowing unauthenticated users to reach administrator-oriented endpoints and trigger a persistent state change.
AnalysisAI
Unauthenticated remote attackers can reach administrator-oriented REST API routes in the Mailchimp for WooCommerce WordPress plugin before 6.1.1 because the permission callback does not verify the requesting user's capability, allowing a persistent state change (CWE-862). Publicly available exploit code exists. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions - remote unauthenticated exploitation against default configurations of the Mailchimp for WooCommerce plugin (any version before 6.1.1) with the plugin installed and active. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a real, actionable priority driven more by exploitability signals than by raw severity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: 6.1.1. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Mailchimp For Woocommerce
View allThe Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users (such as
SQL injection in the MailChimp For WooCommerce WordPress plugin (all versions prior to 6.2) allows authenticated adminis
The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perfo
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today