MailMunch vulnerabilities
We track 3 vulnerabilities in MailMunch products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
Latest MailMunch vulnerabilities
- 8.1 High severity
Mailmunch Forms for Mailchimp: Missing Authorization
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `sign_in()` and `sign_up()` AJAX handlers in all versions up to, and including, 3.2.7. This makes it possible for
- 8.8 High severity
MailChimp Forms by MailMunch: Missing Authorization
Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailChimp Forms by MailMunch: from n/a through 3.1.4.
- 8.8 High severity
MailChimp Forms by MailMunch: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailChimp Forms by MailMunch.This issue affects MailChimp Forms by MailMunch: from n/a through 3.2.1.