PLUGIN SECURITY
Is Mailchimp For Woocommerce safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Mailchimp For Woocommerce WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
mailchimp-for-woocommerce - Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
- Mailchimp for WooCommerce [mailchimp-for-woocommerce] < 2.1.2 [WordPress MailChimp for WooCommerce plugin <= 2.1.1 - Local File Inclusion]
- Mailchimp for WooCommerce [mailchimp-for-woocommerce] < 2.7.1 [CVE-2022-2267, WordPress Mailchimp for WooCommerce plugin <= 2.7 - Authenticated Server-Side Request Forgery (SSRF) vulnerability, Mailchimp for WooCommerce <= 2.7 - Authenticated (Subscriber+) Server-Side Request Forgery, MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF]
- Mailchimp for WooCommerce [mailchimp-for-woocommerce] < 2.7.2 [CVE-2022-2556, WordPress Mailchimp for WooCommerce plugin <= 2.7.1 - Authenticated Server-Side Request Forgery (SSRF) vulnerability, Mailchimp for WooCommerce <= 2.7.1 - Authenticated (Admin+) Server-Side Request Forgery, MailChimp for Woocommerce < 2.7.2 - Admin+ SSRF]
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- WooCommerce — 7000000+ active installs
- WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin — 4000000+ active installs — max PHP 8.4
- Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation — 1000000+ active installs — max PHP 8.4
- MC4WP: Mailchimp for WordPress — 1000000+ active installs — max PHP 8.4
- WooCommerce PayPal Payments — 800000+ active installs — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.