CVE-2025-12172 | Mailchimp List Subscribe Form Plugin up to 2.0.0 on WordPress mailchimp_sf_change_list_if_necessary cross-site request forgery

A vulnerability classified as problematic has been found in Mailchimp List Subscribe Form Plugin up to 2.0.0 on WordPress. This vulnerability affects the function mailchimp_sf_change_list_if_necessary. Performing a manipulation results in cross-site request forgery.

This vulnerability is cataloged as CVE-2025-12172. It is possible to initiate the attack remotely. There is no exploit available.