CVE-2023-33328

29th percentile - higher than 29% of all known CVEs

The PluginOps MailChimp Subscribe Form plugin versions up to 4.0.9.1 has a stored Cross-Site Scripting (XSS) vulnerability with admin authorization. An attacker can exploit this vulnerability to inject malicious scripts that will be executed in the context of users visiting the site.

Exploitation of this vulnerability may lead to user data theft and session hijacking, posing a serious threat to the organization's security.

It is recommended to update the PluginOps MailChimp Subscribe Form plugin to the latest version to eliminate this security vulnerability.