NVD HIGH: CVE-2026-15052 — The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin ...

Saturday, August 1, 2026 at 09:16 AM UTC·Source: NIST NVD

Updated: Saturday, August 1, 2026 at 10:00 AM UTC

Executive Summary

The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Field Values in all versions up to, and including, 4.3.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesse

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-15052

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Aug 1, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

BBVA acquires SocGen's 50% stake in brokerage joint venture Altura Markets

BBVA has reached an agreement with Société Générale (SG) to integrate Altura Markets into the BBVA Group by acquiring the 50 percent stake currently owned by the French bank, becoming the company's sole shareholder. The transaction is subject to the relevant regulatory approvals.

29m agoFinextra

MEDIUMVulnerability

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS

An unknown Chinese-threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit. Attack surface management platform Censys said it identified the threat actor running more than 100 web properties, most of which are fake Amazon Web Services (AWS) sign-in pages on a domain that also hosts the exploit toolkit. "

1h agoThe Hacker News

MEDIUMVulnerability

FCA streamlines transaction reporting obligations

Transaction reporting requirements become smarter, simpler and more proportionate under new rules from the FCA.

1h agoFinextra