CVE-2026-7520
Received Received - Intake

Unauthorized Data Modification in MailMunch WordPress Plugin

Publication date: 2026-08-05

Last updated on: 2026-08-05

Assigner: Wordfence

Description
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `sign_in()` and `sign_up()` AJAX handlers in all versions up to, and including, 3.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to relink the site's MailMunch integration to an attacker-controlled MailMunch account by submitting attacker-supplied credentials. Once relinked, all subscriber data captured by the plugin's forms is delivered to the attacker, and the forms/landing pages rendered on the site are pulled from the attacker's MailMunch account.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-05
Last Modified
2026-08-05
Generated
2026-08-05
AI Q&A
2026-08-05
EPSS Evaluated
N/A
NVD
CVE-2026-7520
EUVD
EUVD-2026-53287

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mailmunch mailchimp_forms to 3.2.7 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows authenticated attackers with Subscriber-level access or higher to take over the MailChimp Forms by MailMunch plugin in WordPress. They can relink the site's MailMunch integration to their own account by exploiting missing capability checks in AJAX handlers. This redirects all form submissions and subscriber data to the attacker.

Detection Guidance

To detect this vulnerability, check WordPress sites using the MailChimp Forms by MailMunch plugin for unauthorized relinking to attacker-controlled MailMunch accounts. Review AJAX handler logs for suspicious sign_in() or sign_up() calls from Subscriber-level users. Inspect plugin configuration files for unexpected changes in MailMunch integration credentials.

Impact Analysis

If exploited, attackers can steal all subscriber data collected by the plugin's forms. They can also modify the forms and landing pages to display attacker-controlled content. This could lead to data breaches, phishing attacks, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA due to unauthorized access and potential data breaches. GDPR requires protecting personal data, and HIPAA mandates safeguarding health information. Exploitation may result in legal penalties and loss of trust.

Mitigation Strategies

Update the MailChimp Forms by MailMunch plugin to the latest version immediately to patch the missing capability check vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-7520. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart