Security Vulnerability | ww.wp.xz.cn

Resolved dooza
(@dooza)

3 months, 2 weeks ago

Hi there,

Are you aware of this vulnerability: https://patchstack.com/database/wordpress/plugin/contact-form-7-mailchimp-extension/vulnerability/wordpress-contact-form-7-extension-for-mailchimp-plugin-0-9-49-sensitive-data-exposure-vulnerability

The current version is being flagged as still having an issue.

Viewing 5 replies - 1 through 5 (of 5 total)

Plugin Author Renzo Johnson
(@rnzo)

3 months, 2 weeks ago

Hi @dooza,

Thank you for bringing this to our attention! Yes, we are aware of this vulnerability (CVE-2025-68989) and it was addressed in version 0.9.68.

If you’re using version 0.9.68 or later, you are protected.

Thread Starter dooza
(@dooza)

3 months, 2 weeks ago

Hi Renzo,

Thank for the update, I have applied it to all the sites I have that use it, sadly Patchstack thinks your latest version is still vulnerable: https://patchstack.com/database/wordpress/plugin/contact-form-7-mailchimp-extension/vulnerability/wordpress-contact-form-7-extension-for-mailchimp-plugin-0-9-49-sensitive-data-exposure-vulnerability

Plugin Author Renzo Johnson
(@rnzo)

3 months, 2 weeks ago

Version 0.9.69 should be good, let us know if you have other finding: https://chimpmatic.com/contact

Thread Starter dooza
(@dooza)

3 months, 1 week ago

Hi Renzo,

The Patchstack page is now saying 0.9.69 and lower is vulnerable. Are you in contact with them about the issue? The link I posted before has a way to claim ownership as the developer of the plugin, it might help you get to the root of what they think the issue is.

Thread Starter dooza
(@dooza)

3 months ago

Hi @rnzo, the latest version seems to be good now, no more warnings after updating to it. Thank you for your help with this!

Viewing 5 replies - 1 through 5 (of 5 total)

You must be logged in to reply to this topic.

Tags

chimpmatic

7 replies
2 participants
Last reply from: dooza
Last activity: 3 months ago
Status: resolved