← back to popular plugins
wordfence / plugin · contact-form-7-mailchimp-extension
Connect Contact Form 7 and Mailchimp
contact-form-7-mailchimp-extension
total installs
50,000
total vulns
1
critical
0
high
0
medium
1
low
0
latest vuln
—
patched
1
unpatched
0
avg time to patch
—
vulnerabilities
(1)
Contact Form 7 Extension For Mailchimp <= 0.9.54 - Authenticated (Contributor+) Information Exposure
medium
✓ patched
cve id
CVE-2025-68989 ↗
cvss score
4.3
cwe
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
published
Dec 21, 2025
The Connect Contact Form 7 and Mailchimp plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.9.54. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive user or configuration data.