The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Simple Membership MailChimp Integration WordPress plugin before 1.9.8 does not have CSRF checks in its settings page, allowing attackers to trick a logged-in administrator into changing the configured third-party API key. Once replaced, all subsequent member registration data (name, email, membership level) is sent to the attacker-controlled account.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Simple Membership Mailchimp Integration Plugin | — | Update simple-membership-mailchimp-integration plugin to version 1.9.8, or a newer patched version | Oct 30, 2026 | May 14, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub