CVE-2026-73346

The Mailchimp for WooCommerce plugin for WordPress contains a vulnerability that allows attackers with administrator-level access to inject malicious SQL code into the system. This occurs because the plugin does not properly sanitize user input, allowing attackers to modify existing SQL queries and potentially extract sensitive database information. As a result, attackers can exploit this vulnerability to gain unauthorized access to the database.

Based on public CVE data (MITRE/NVD).