https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 04 Nov 2026 17:52:37 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-107097 <p>The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not perform any authorization check before using the site owner&#39;s stored Mailchimp credential to add subscriber records to an audience chosen by the request, allowing unauthenticated attackers to inject arbitrary email addresses and contact details into the site owner&#39;s Mailchimp account as confirmed subscribers.</p> <p>The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not perform any authorization check before using the site owner&#39;s stored Mailchimp credential to add subscriber records to an audience chosen by the request, allowing unauthenticated attackers to inject arbitrary email addresses and contact details into the site owner&#39;s Mailchimp account as confirmed subscribers.</p> https://db.gcve.eu/vuln/fkie_cve-2026-107097 https://db.gcve.eu/vuln/ghsa-w3vc-5h78-6ggp <p>The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not perform any authorization check before using the site owner&#39;s stored Mailchimp credential to add subscriber records to an audience chosen by the request, allowing unauthenticated attackers to inject arbitrary email addresses and contact details into the site owner&#39;s Mailchimp account as confirmed subscribers.</p> <p>The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not perform any authorization check before using the site owner&#39;s stored Mailchimp credential to add subscriber records to an audience chosen by the request, allowing unauthenticated attackers to inject arbitrary email addresses and contact details into the site owner&#39;s Mailchimp account as confirmed subscribers.</p> https://db.gcve.eu/vuln/ghsa-w3vc-5h78-6ggp