CVE-2026-118166 | MC4WP Mailchimp Plugin up to 4.14.x on WordPress Dynamic Content Tag injection (EUVD-2026-117972)

November 6, 2026 Yanac

A vulnerability, which was classified as critical, was found in MC4WP Mailchimp Plugin up to 4.14.x on WordPress. Affected by this issue is some unknown functionality of the component Dynamic Content Tag. Such manipulation leads to injection.

This vulnerability is uniquely identified as CVE-2026-118166. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More