Description
WordPress Plugin MailChimp for WooCommerce is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin MailChimp for WooCommerce version 2.1.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.1.2 or latest
References
Related Vulnerabilities
WordPress Plugin Maps Widget for Google Maps-Google Maps Builder Security Bypass (4.16)
WordPress Plugin Subscribe to Comments Unsubscribe Challenge Information Disclosure (2.0.2)
PHP CVE-2007-4670 Vulnerability (CVE-2007-4670)
WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Security Bypass (4.10.7)
Oracle Application Server Other Vulnerability (CVE-2005-3452)