Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The MailChimp Campaigns plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.2.4. This is due to missing capability checks on the `mailchimp_campaigns_manager_disconnect_app` function that is hooked to the AJAX action of the same name. This makes it possible for authenticated attackers, with Subscriber-level access and above, to disconnect the site from its MailChimp synchronization app, disrupting automated email campaigns and marketing integrations.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-1303 The MailChimp Campaigns plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.2.4. This is due to missing capability check… https://www.cve.org/CVERecord?id=CVE-2026-1303
Post summary
The text announces CVE-2026-1303, a missing‑authorization flaw in MailChimp Campaigns WordPress plugin up to version 3.2.4, without any PoC, exploit, or patch information.
CVE-2026-1303 Missing Authorization in MailChimp Campaigns WordPress Plugin Allows App Disconnection https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1303
Post summary
A missing authorization flaw in the MailChimp Campaigns WordPress plugin was disclosed, potentially allowing attackers to disconnect app integrations; no exploit proof, active exploitation, patch, or false‑positive claim is mentioned.