https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-8680.htmlhttps://patchthecve.com/cve/CVE-2024-8680.htmlWed, 17 Jun 2026 08:23:06 +0000MEDIUM 4.4: The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.9.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-levehttps://patchthecve.com/cve/CVE-2024-8850.htmlhttps://patchthecve.com/cve/CVE-2024-8850.htmlWed, 17 Jun 2026 08:23:25 +0000MEDIUM 6.1: The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email' parameter when a placeholder such as {email} is used for the field in versions 4.9.9 to 4.9.16 due to insufficient input sanitization and output escaping. This makes it possible fohttps://patchthecve.com/cve/CVE-2023-51682.htmlhttps://patchthecve.com/cve/CVE-2023-51682.htmlWed, 17 Jun 2026 06:41:27 +0000MEDIUM 5.3: Missing Authorization vulnerability in ibericode MC4WP.This issue affects MC4WP: from n/a through 4.9.9.