CVE-2026-115225

Smart Popup by Supsystic < 2.0.2 - Unauthenticated SSRF via MailChimp Groups Lookup

The Customer Engagement System WordPress plugin before 2.0.2 does not restrict access to its MailChimp interest-group lookup or validate the API key supplied to it, allowing unauthenticated users to make the server open connections to arbitrary internal hosts and ports and infer from response timing which ones are reachable.

Affected

Customer Engagement System

CVSS v3.1 CNA

5.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

EPSS

0.24% chance of exploitation in the next 30 days, 16th percentile

Published

2026-10-28

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/b91dc5fc-8b7b-4874-9e71-e3d07b41812a/snapshot

CVE references

• https://wpscan.com/vulnerability/b91dc5fc-8b7b-4874-9e71-e3d07b41812aREFERENCE

References

• CVE Record
• NVD entry