CVE-2023-32517 WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.3 is vulnerable to Open Redirection
Attackers can redirect users to malicious sites via the MailChimp Subscribe Forms plugin, potentially facilitating phishing attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-32517?
CVE-2023-32517 is a medium-severity vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder, published on 29 Dec 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder.This issue affects MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder: from n/a through 4.0.9.3.
Weakness: CWE-601
Which versions are affected by CVE-2023-32517?
It affects 1 product.
Products include Ibericode Mailchimp.
How do I fix CVE-2023-32517?
No fix has been published for CVE-2023-32517 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-32517 being exploited?
There is no known exploitation of CVE-2023-32517 in the wild and no public exploit code.
Other vulnerabilities in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
Sources
Also known as GHSA-q34j-6xqh-3786.