WordPress plugin
Mailchimp List Subscribe Form security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All Mailchimp List Subscribe Form vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery to Mailchimp List Change ≤2.0.0Update to 2.0.1 | CVE-2025-12172 |
- Medium4.3Cross-Site Request Forgery to Mailchimp List Change
≤2.0.0Update to 2.0.1
Mailchimp List Subscribe Form: common questions
Does Mailchimp List Subscribe Form have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Mailchimp List Subscribe Form: 1 medium. None are known to affect version null.
How do I check which version of Mailchimp List Subscribe Form I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Mailchimp List Subscribe Form vulnerability?
CVE-2025-12172, published Feb 18, 2026: Mailchimp List Subscribe Form <= 2.0.0 - Cross-Site Request Forgery to Mailchimp List Change. Severity: Medium (CVSS 4.3).
Is any Mailchimp List Subscribe Form vulnerability listed in CISA KEV?
No. None of the known Mailchimp List Subscribe Form vulnerabilities is currently listed in the CISA KEV catalog.