From 49c93d564e8a59a747d169dcfefebb8be2c459bf Mon Sep 17 00:00:00 2001
From: Dharmesh Patel <dspatel44@gmail.com>
Date: Thu, 8 Jan 2026 16:28:42 +0530
Subject: [PATCH 1/8] Fix plugin check plugin errors to improve overall
 codebase.

---
 includes/admin/admin-notices.php              |  5 ++++
 includes/admin/class-mailchimp-user-sync.php  |  3 ++-
 includes/admin/templates/activate-account.php |  4 +++
 .../admin/templates/create-account-page.php   |  5 ++++
 includes/admin/templates/header.php           |  7 ++++-
 includes/admin/templates/login-button.php     |  5 ++++
 includes/admin/templates/login.php            |  5 ++++
 includes/admin/templates/settings-header.php  |  4 +++
 includes/admin/templates/settings.php         |  6 +++++
 includes/admin/templates/setup-page.php       | 10 ++++---
 includes/admin/templates/suggest-to-login.php |  4 +++
 includes/admin/templates/user-sync.php        |  5 ++++
 .../mailchimp-form-field/field-markup.php     |  5 ++++
 .../blocks/mailchimp-form-group/markup.php    |  5 ++++
 includes/blocks/mailchimp/markup.php          |  5 ++++
 includes/class-mailchimp-form-submission.php  |  9 ++++++-
 mailchimp.php                                 | 27 +++++++++++++------
 mailchimp_compat.php                          |  5 ++++
 mailchimp_upgrade.php                         |  5 ++++
 mailchimp_widget.php                          |  5 ++++
 readme.txt                                    |  2 +-
 21 files changed, 116 insertions(+), 15 deletions(-)

diff --git a/includes/admin/admin-notices.php b/includes/admin/admin-notices.php
index 16dd25b3..163cc06a 100644
--- a/includes/admin/admin-notices.php
+++ b/includes/admin/admin-notices.php
@@ -7,6 +7,11 @@
 
 namespace Mailchimp\WordPress\Includes\Admin;
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 /**
  * Display success admin notice.
  *
diff --git a/includes/admin/class-mailchimp-user-sync.php b/includes/admin/class-mailchimp-user-sync.php
index 467b185b..0f58aedd 100644
--- a/includes/admin/class-mailchimp-user-sync.php
+++ b/includes/admin/class-mailchimp-user-sync.php
@@ -325,7 +325,8 @@ public function subscriber_status_field() {
 					_n(
 						'You will need %1$sa Mailchimp plan%2$s that includes %3$d contact.',
 						'You will need %1$sa Mailchimp plan%2$s that includes %3$d contacts.',
-						absint( $users_count )
+						absint( $users_count ),
+						'mailchimp'
 					),
 					'<a href="https://mailchimp.com/help/about-mailchimp-pricing-plans/" target="_blank" rel="noopener noreferrer">',
 					'</a>',
diff --git a/includes/admin/templates/activate-account.php b/includes/admin/templates/activate-account.php
index ac642ceb..f7c0ea05 100644
--- a/includes/admin/templates/activate-account.php
+++ b/includes/admin/templates/activate-account.php
@@ -5,6 +5,10 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
 ?>
 <div class="mailchimp-sf-confirm-email-wrapper mailchimp-sf-content-box-wrapper <?php echo esc_attr( ( ! $signup_initiated ) ? 'hidden' : '' ); ?>">
 	<div class="mailchimp-sf-confirm-email mailchimp-sf-content-box">
diff --git a/includes/admin/templates/create-account-page.php b/includes/admin/templates/create-account-page.php
index 6852d105..d511e41a 100644
--- a/includes/admin/templates/create-account-page.php
+++ b/includes/admin/templates/create-account-page.php
@@ -5,6 +5,11 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 $admin_email = get_option( 'admin_email' );
 $user        = get_user_by( 'email', $admin_email );
 
diff --git a/includes/admin/templates/header.php b/includes/admin/templates/header.php
index a3a074a0..b4bf22e1 100644
--- a/includes/admin/templates/header.php
+++ b/includes/admin/templates/header.php
@@ -5,6 +5,11 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 $user         = get_option( 'mc_user' );
 $is_logged_in = ! ( ! $user || ( ! get_option( 'mc_api_key' ) && ! mailchimp_sf_get_access_token() ) );
 ?>
@@ -68,4 +73,4 @@
 			</div>
 		<?php endif; ?>
 	</div>
-</div>
\ No newline at end of file
+</div>
diff --git a/includes/admin/templates/login-button.php b/includes/admin/templates/login-button.php
index 971c9664..dca0048c 100644
--- a/includes/admin/templates/login-button.php
+++ b/includes/admin/templates/login-button.php
@@ -5,6 +5,11 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 $button_text = $login_button_text ?? __( 'Log in', 'mailchimp' );
 ?>
 <button id="mailchimp_sf_oauth_connect" class="button mailchimp-sf-button button-primary">
diff --git a/includes/admin/templates/login.php b/includes/admin/templates/login.php
index a8ee6260..34372441 100644
--- a/includes/admin/templates/login.php
+++ b/includes/admin/templates/login.php
@@ -5,6 +5,11 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 ?>
 <div class="wrap">
 	<hr class="wp-header-end" style="display:none;"/>
diff --git a/includes/admin/templates/settings-header.php b/includes/admin/templates/settings-header.php
index e4c3649b..02afb643 100644
--- a/includes/admin/templates/settings-header.php
+++ b/includes/admin/templates/settings-header.php
@@ -5,6 +5,10 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
 ?>
 <div class="mailchimp-sf-settings-page-hero-wrapper">
 	<div class="mailchimp-sf-settings-page-hero">
diff --git a/includes/admin/templates/settings.php b/includes/admin/templates/settings.php
index 555dec05..27a578f4 100644
--- a/includes/admin/templates/settings.php
+++ b/includes/admin/templates/settings.php
@@ -5,6 +5,11 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 use function Mailchimp\WordPress\Includes\Admin\admin_notice_error;
 
 $user         = get_option( 'mc_user' );
@@ -94,6 +99,7 @@ function ( $ele ) {
 									</div>
 									<div class="mailchimp-sf-settings-list-select-button">
 										<input type="hidden" name="mcsf_action" value="update_mc_list_id" />
+										<?php wp_nonce_field( 'update_mc_list_id_action', 'update_mc_list_id_nonce' ); ?>
 										<input type="submit" name="submit" value="<?php esc_attr_e( 'Fetch list settings', 'mailchimp' ); ?>" class="mailchimp-sf-button btn-secondary" />
 									</div>
 								</div>
diff --git a/includes/admin/templates/setup-page.php b/includes/admin/templates/setup-page.php
index b24c5b50..5a3755fb 100644
--- a/includes/admin/templates/setup-page.php
+++ b/includes/admin/templates/setup-page.php
@@ -5,6 +5,10 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
 ?>
 <div class="mailchimp-sf-main-setings-wrapper">
 	<div class="mailchimp-sf-main-settings">
@@ -224,7 +228,7 @@
 							<tr>
 								<th class="mailchimp-sf-option-header">
 									<label for="mc_nuke_all_styles">
-										<?php esc_html_e( 'Remove CSS' ); ?>
+										<?php esc_html_e( 'Remove CSS', 'mailchimp' ); ?>
 									</label>
 								</th>
 								<td>
@@ -234,7 +238,7 @@
 											<input type="checkbox" name="mc_nuke_all_styles" id="mc_nuke_all_styles" class="mailchimp-sf-checkbox" <?php checked( get_option( 'mc_nuke_all_styles' ), true ); ?> onclick="showMe('mc-custom-styling')"/>
 										</div>
 										<label for="mc_nuke_all_styles">
-											<?php esc_html_e( 'This will disable all Mailchimp CSS, so it\'s recommended for WordPress experts only.' ); ?>
+											<?php esc_html_e( 'This will disable all Mailchimp CSS, so it\'s recommended for WordPress experts only.', 'mailchimp' ); ?>
 										</label>
 									</div>
 								</td>
@@ -265,7 +269,7 @@
 											<input type="checkbox" name="mc_custom_style" id="mc_custom_style" class="mailchimp-sf-checkbox"<?php checked( get_option( 'mc_custom_style' ), 'on' ); ?> />
 										</div>
 										<label for="mc_custom_style">
-											<?php esc_html_e( 'Edit the default Mailchimp CSS style.' ); ?>
+											<?php esc_html_e( 'Edit the default Mailchimp CSS style.', 'mailchimp' ); ?>
 										</label>
 									</div>
 								</td>
diff --git a/includes/admin/templates/suggest-to-login.php b/includes/admin/templates/suggest-to-login.php
index a05357fa..d47d15c6 100644
--- a/includes/admin/templates/suggest-to-login.php
+++ b/includes/admin/templates/suggest-to-login.php
@@ -5,6 +5,10 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
 ?>
 <div class="mailchimp-sf-suggest-to-login mailchimp-sf-content-box-wrapper hidden">
 	<div class="mailchimp-sf-content-box">
diff --git a/includes/admin/templates/user-sync.php b/includes/admin/templates/user-sync.php
index d1da07b3..7ee2fe20 100644
--- a/includes/admin/templates/user-sync.php
+++ b/includes/admin/templates/user-sync.php
@@ -5,6 +5,11 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 global $wp_settings_sections, $wp_settings_fields;
 ?>
 <div class="mailchimp-sf-user-sync-page-wrapper">
diff --git a/includes/blocks/mailchimp-form-field/field-markup.php b/includes/blocks/mailchimp-form-field/field-markup.php
index d622ee69..8fe3578a 100644
--- a/includes/blocks/mailchimp-form-field/field-markup.php
+++ b/includes/blocks/mailchimp-form-field/field-markup.php
@@ -5,6 +5,11 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 $list_id                 = $block->context['mailchimp/list_id'] ?? '';
 $show_required_indicator = $block->context['mailchimp/show_required_indicator'] ?? true;
 $template                = $block->context['mailchimp/template'] ?? 'default';
diff --git a/includes/blocks/mailchimp-form-group/markup.php b/includes/blocks/mailchimp-form-group/markup.php
index c2795d8d..33773da3 100644
--- a/includes/blocks/mailchimp-form-group/markup.php
+++ b/includes/blocks/mailchimp-form-group/markup.php
@@ -5,6 +5,11 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 $list_id    = $block->context['mailchimp/list_id'] ?? '';
 $group_id   = $attributes['id'] ?? '';
 $label      = $attributes['label'] ?? '';
diff --git a/includes/blocks/mailchimp/markup.php b/includes/blocks/mailchimp/markup.php
index 2c9a8a80..f16b9dc0 100644
--- a/includes/blocks/mailchimp/markup.php
+++ b/includes/blocks/mailchimp/markup.php
@@ -5,6 +5,11 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 // Check if we should display the form.
 if ( ! mailchimp_sf_should_display_form() ) {
 	return;
diff --git a/includes/class-mailchimp-form-submission.php b/includes/class-mailchimp-form-submission.php
index b0a8de07..68d8278e 100644
--- a/includes/class-mailchimp-form-submission.php
+++ b/includes/class-mailchimp-form-submission.php
@@ -99,6 +99,7 @@ public function handle_form_submission() {
 		$merge_fields          = get_option( 'mc_merge_vars', array() );
 		$interest_groups       = get_option( 'mc_interest_groups', array() );
 
+		// phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
 		// Check if request from latest block.
 		if ( isset( $_POST['mailchimp_sf_list_id'] ) ) {
 			$list_id               = isset( $_POST['mailchimp_sf_list_id'] ) ? sanitize_text_field( wp_unslash( $_POST['mailchimp_sf_list_id'] ) ) : '';
@@ -148,6 +149,7 @@ public function handle_form_submission() {
 		} else {
 			$email_type = 'html';
 		}
+		// phpcs:enable WordPress.Security.NonceVerification.Missing
 
 		$response = $this->subscribe_to_list(
 			$list_id,
@@ -251,10 +253,11 @@ public function prepare_merge_fields_body( $merge_fields, $skip_merge_validation
 			$opt = 'mc_mv_' . $tag;
 
 			// Skip if the field is not required and not submitted.
-			if ( ( true !== (bool) $merge_field['required'] && ! isset( $_POST[ $opt ] ) ) || $skip_merge_validation ) {
+			if ( ( true !== (bool) $merge_field['required'] && ! isset( $_POST[ $opt ] ) ) || $skip_merge_validation ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
 				continue;
 			}
 
+			// phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
 			$opt_val = isset( $_POST[ $opt ] ) ? map_deep( stripslashes_deep( $_POST[ $opt ] ), 'sanitize_text_field' ) : '';
 
 			switch ( $merge_field['type'] ) {
@@ -339,6 +342,7 @@ public function prepare_groups_body( $interest_groups ) {
 
 		foreach ( $interest_groups as $interest_group ) {
 			$ig_id = $interest_group['id'];
+			// phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
 			if ( isset( $_POST['group'][ $ig_id ] ) && 'hidden' !== $interest_group['type'] ) {
 				switch ( $interest_group['type'] ) {
 					case 'dropdown':
@@ -367,6 +371,7 @@ public function prepare_groups_body( $interest_groups ) {
 						break;
 				}
 			}
+			// phpcs:enable WordPress.Security.NonceVerification.Missing
 		}
 		return $groups;
 	}
@@ -544,6 +549,7 @@ public function remove_empty_merge_fields( $merge ) {
 	 * @return bool|WP_Error True if valid, WP_Error if invalid.
 	 */
 	protected function validate_form_submission() {
+		// phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
 		$spam_message = esc_html__( "We couldn't process your submission as it was flagged as potential spam. Please try again.", 'mailchimp' );
 		// Make sure the honeypot field is set, but not filled (if it is, then it's a spam).
 		if ( ! isset( $_POST['mailchimp_sf_alt_email'] ) || ! empty( $_POST['mailchimp_sf_alt_email'] ) ) {
@@ -579,5 +585,6 @@ protected function validate_form_submission() {
 		 * @param array $post_data The $_POST data.
 		 */
 		return apply_filters( 'mailchimp_sf_form_submission_validation', true, $_POST );
+		// phpcs:enable WordPress.Security.NonceVerification.Missing
 	}
 }
diff --git a/mailchimp.php b/mailchimp.php
index 83b5ac5c..f778a9f6 100644
--- a/mailchimp.php
+++ b/mailchimp.php
@@ -1,6 +1,6 @@
 <?php
 /**
- * Plugin Name:       Mailchimp
+ * Plugin Name:       Mailchimp List Subscribe Form
  * Plugin URI:        https://mailchimp.com/help/connect-or-disconnect-list-subscribe-for-wordpress/
  * Description:       Add a Mailchimp signup form block, widget or shortcode to your WordPress site.
  * Text Domain:       mailchimp
@@ -34,6 +34,11 @@
  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 // Check if the autoload file exists
 if ( is_readable( __DIR__ . '/vendor/autoload.php' ) ) {
 	require_once __DIR__ . '/vendor/autoload.php';
@@ -421,7 +426,7 @@ function mailchimp_sf_set_form_defaults( $list_name = '' ) {
  * @return void
  **/
 function mailchimp_sf_save_general_form_settings() {
-
+	// phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the mailchimp_sf_request_handler() function.
 	/*Enable double optin toggle*/
 	if ( isset( $_POST['mc_double_optin'] ) ) {
 		update_option( 'mc_double_optin', true );
@@ -447,11 +452,11 @@ function mailchimp_sf_save_general_form_settings() {
 	/* Update existing */
 	if ( isset( $_POST['mc_update_existing'] ) ) {
 		update_option( 'mc_update_existing', true );
-		$msg = esc_html__( 'Update existing subscribers turned On!' );
+		$msg = esc_html__( 'Update existing subscribers turned On!', 'mailchimp' );
 		admin_notice_success( $msg );
 	} elseif ( get_option( 'mc_update_existing' ) !== false ) {
 		update_option( 'mc_update_existing', false );
-		$msg = esc_html__( 'Update existing subscribers turned Off!' );
+		$msg = esc_html__( 'Update existing subscribers turned Off!', 'mailchimp' );
 		admin_notice_success( $msg );
 	}
 
@@ -521,6 +526,7 @@ function mailchimp_sf_save_general_form_settings() {
 
 	$msg = esc_html__( 'Successfully Updated your List Subscribe Form Settings!', 'mailchimp' );
 	admin_notice_success( $msg );
+	// phpcs:enable WordPress.Security.NonceVerification.Missing
 }
 
 /**
@@ -531,15 +537,20 @@ function mailchimp_sf_change_list_if_necessary() {
 		return;
 	}
 
+	if (
+		! current_user_can( MCSF_CAP_THRESHOLD ) ||
+		! isset( $_POST['update_mc_list_id_nonce'] ) ||
+		! wp_verify_nonce( sanitize_key( $_POST['update_mc_list_id_nonce'] ), 'update_mc_list_id_action' )
+	) {
+		wp_die( 'Security check failed.' );
+	}
+
 	if ( empty( $_POST['mc_list_id'] ) ) {
 		$msg = esc_html__( 'Please choose a valid list', 'mailchimp' );
 		admin_notice_error( $msg );
 		return;
 	}
 
-	// Simple permission check before going through all this
-	if ( ! current_user_can( MCSF_CAP_THRESHOLD ) ) { return; }
-
 	$api = mailchimp_sf_get_api();
 	if ( ! $api ) { return; }
 
@@ -605,7 +616,7 @@ function mailchimp_sf_change_list_if_necessary() {
 				__( '<b>Success!</b> Loaded and saved the info for %d Merge Variables', 'mailchimp' ) . $igs_text,
 				count( $mv )
 			) . ' ' .
-			esc_html__( 'from your list' ) . ' "' . $list_name . '"<br/><br/>' .
+			esc_html__( 'from your list', 'mailchimp' ) . ' "' . $list_name . '"<br/><br/>' .
 			esc_html__( 'Now you should either Turn On the Mailchimp Widget or change your options below, then turn it on.', 'mailchimp' );
 
 			admin_notice_success( $msg );
diff --git a/mailchimp_compat.php b/mailchimp_compat.php
index c10331a6..98744ab2 100644
--- a/mailchimp_compat.php
+++ b/mailchimp_compat.php
@@ -5,6 +5,11 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 /* Form Display Functions */
 if ( ! function_exists( 'mc_display_widget' ) ) {
 
diff --git a/mailchimp_upgrade.php b/mailchimp_upgrade.php
index debe2b94..0ede54ec 100644
--- a/mailchimp_upgrade.php
+++ b/mailchimp_upgrade.php
@@ -5,6 +5,11 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 /**
  * Check plugin version.
  *
diff --git a/mailchimp_widget.php b/mailchimp_widget.php
index 3ef5cedf..7c44fbba 100644
--- a/mailchimp_widget.php
+++ b/mailchimp_widget.php
@@ -5,6 +5,11 @@
  * @package Mailchimp
  */
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 /**
  * Displays a Mailchimp Signup Form
  *
diff --git a/readme.txt b/readme.txt
index 0c9d24d2..f6c2828e 100644
--- a/readme.txt
+++ b/readme.txt
@@ -1,7 +1,7 @@
 === Mailchimp List Subscribe Form ===
 Contributors: Mailchimp
 Tags:         mailchimp, email, newsletter, signup, marketing
-Tested up to: 6.8
+Tested up to: 6.9
 Stable tag:   2.0.0
 License:      GPL-2.0-or-later
 License URI:  https://spdx.org/licenses/GPL-2.0-or-later.html

From 9d3dc224bbe6bb5c77ba7d4353df1875e8572234 Mon Sep 17 00:00:00 2001
From: Dharmesh Patel <dspatel44@gmail.com>
Date: Thu, 8 Jan 2026 16:32:36 +0530
Subject: [PATCH 2/8] Version bump to 2.0.1

---
 mailchimp.php     | 4 ++--
 package-lock.json | 4 ++--
 package.json      | 2 +-
 readme.txt        | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/mailchimp.php b/mailchimp.php
index f778a9f6..8c257874 100644
--- a/mailchimp.php
+++ b/mailchimp.php
@@ -4,7 +4,7 @@
  * Plugin URI:        https://mailchimp.com/help/connect-or-disconnect-list-subscribe-for-wordpress/
  * Description:       Add a Mailchimp signup form block, widget or shortcode to your WordPress site.
  * Text Domain:       mailchimp
- * Version:           2.0.0
+ * Version:           2.0.1
  * Requires at least: 6.4
  * Requires PHP:      7.0
  * PHP tested up to:  8.3
@@ -72,7 +72,7 @@ function () {
 use function Mailchimp\WordPress\Includes\Admin\{admin_notice_error, admin_notice_success};
 
 // Version constant for easy CSS refreshes
-define( 'MCSF_VER', '2.0.0' );
+define( 'MCSF_VER', '2.0.1' );
 
 // What's our permission (capability) threshold
 define( 'MCSF_CAP_THRESHOLD', 'manage_options' );
diff --git a/package-lock.json b/package-lock.json
index a428cd76..ea8f89e8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@mailchimp/wordpress",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@mailchimp/wordpress",
-      "version": "2.0.0",
+      "version": "2.0.1",
       "license": "GPL-2.0-or-later",
       "dependencies": {
         "@wordpress/block-editor": "^13.2.0",
diff --git a/package.json b/package.json
index 2940b884..c4dcd233 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@mailchimp/wordpress",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "Add a Mailchimp signup form widget to your WordPress site.",
   "homepage": "https://github.com/mailchimp/wordpress",
   "bugs": {
diff --git a/readme.txt b/readme.txt
index f6c2828e..3968b4b2 100644
--- a/readme.txt
+++ b/readme.txt
@@ -2,7 +2,7 @@
 Contributors: Mailchimp
 Tags:         mailchimp, email, newsletter, signup, marketing
 Tested up to: 6.9
-Stable tag:   2.0.0
+Stable tag:   2.0.1
 License:      GPL-2.0-or-later
 License URI:  https://spdx.org/licenses/GPL-2.0-or-later.html
 

From c43928facd858ae8cbb5a1ef8a0208640cd64dd9 Mon Sep 17 00:00:00 2001
From: Dharmesh Patel <dspatel44@gmail.com>
Date: Thu, 8 Jan 2026 16:42:49 +0530
Subject: [PATCH 3/8] Update changelog and credit files.

---
 CHANGELOG.md | 11 +++++++++++
 CREDITS.md   |  2 +-
 readme.txt   |  4 ++++
 3 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c2fec058..3c3580de 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,16 @@ All notable changes to this project will be documented in this file, per [the Ke
 
 ## [Unreleased] - TBD
 
+## [2.0.1] - 2026-01-08
+
+### Fixed
+
+- Plugin check plugin errors to improve overall codebase (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
+
+### Changed
+
+- Bump WordPress "tested up to" version 6.9 (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
+
 ## [2.0.0] - 2025-08-11
 
 ### Added
@@ -352,6 +362,7 @@ All notable changes to this project will be documented in this file, per [the Ke
 - Security and various other improvements
 
 [Unreleased]: https://github.com/mailchimp/wordpress/compare/main...develop
+[2.0.1]: https://github.com/mailchimp/wordpress/compare/2.0.0...2.0.1
 [2.0.0]: https://github.com/mailchimp/wordpress/compare/1.9.0...2.0.0
 [1.9.0]: https://github.com/mailchimp/wordpress/compare/1.8.0...1.9.0
 [1.8.0]: https://github.com/mailchimp/wordpress/compare/1.7.0...1.8.0
diff --git a/CREDITS.md b/CREDITS.md
index 1f7f4885..f2f67864 100644
--- a/CREDITS.md
+++ b/CREDITS.md
@@ -12,7 +12,7 @@ The following individuals are responsible for curating the list of issues, respo
 
 Thank you to all the people who have already contributed to this repository via bug reports, code, design, ideas, project management, translation, testing, etc.
 
-[Mailchimp (@mailchimp)](https://github.com/mailchimp), [Crowd Favorite (@crowdfavorite)](https://github.com/crowdfavorite), [Matthew Richmond (@bigdawggi)](https://github.com/bigdawggi), [Devin Reams (@devinreams)](https://github.com/devinreams), [Alex King (@alexkingorg)](https://github.com/alexkingorg), [Jesse (@jessedp)](https://github.com/jessedp), [Andrew Ellis](awellis@me.com), [Evan Anderson (@ejdanderson)](https://github.com/ejdanderson), [Webb Henderson (@emerywebster)](https://github.com/emerywebster), [Steven Mathias (@ssmathias)](https://github.com/ssmathias), [Jonathan D. Johnson (@jondavidjohn)](https://github.com/jondavidjohn), [Ross Tweedie (@digitales)](https://github.com/digitales), [(@mcwill)](https://github.com/mcwill), [Andrew Austin (@andrewjaustin)](https://github.com/andrewjaustin), [Marc Queralt i Bassa (@MarcQueralt)](https://github.com/MarcQueralt), [Chris Mospaw (@mospaw)](https://github.com/mospaw), [Jonas Stensved (@jstensved)](https://github.com/jstensved), [netboy](netboy@netboy.pl), [Lenin](lenin@tasawr.com), [Bauke Zwaan (@baukezwaan)](https://github.com/baukezwaan), [Jascha Ehrenreich (@jaeh)](https://github.com/jaeh), [Chris Wilcoxson (@slushman)](https://github.com/slushman), [Luke Watts (@thisislawatts)](https://github.com/thisislawatts), [Glenn Ansley (@glennansley)](https://github.com/glennansley), [SiteGround](http://www.siteground.com/wordpress-hosting.htm), [Peter Kahoun](http://kahi.cz/), [Jan Lund](), [Michael Jaekel](), [Ιωάννης Δημοφέρλιας (John Dimoferlias)](), [Tomás Nader](), [Claudia Mansilla](http://cricava.com/), [Helen Urbanik](http://www.motomaania.ee/), [Maxime Toulliou](http://www.maximetoulliou.com/), [שגיב בית](http://www.sagive.co.il), [Okostobi](), [Stefan Des](http://www.stefandes.com), [백선기 (SK Baek)](), [Alexander Roterud aka Defrag](http://www.tigerpews.com), [Filip Stas](http://suddenelfilio.net/), [Maria Manoela Porto](), [Tiago Faria](http://xroot.org), [Alexandru Armin Roșu](), [Илья](http://fatcow.com), [Sebastian Johnsson](http://www.agiley.se/), [Hakan E.](http://kazancexpert.com/), [Josh Grosser (@jgrosser-intuit)](https://github.com/jgrosser-intuit), [10up (@10up)](https://github.com/10up), [Nate Conley (@nateconley)](https://github.com/nateconley), [Darin Kotter (@dkotter)](https://github.com/dkotter), [Jeffrey Paul (@jeffpaul)](https://github.com/jeffpaul), [Eddie Shrake (@eddieshrake)](https://github.com/eddieshrake), [Sumit Bagthariya (@qasumitbagthariya)](https://github.com/qasumitbagthariya), [Vikram Moparthy (@vikrampm1)](https://github.com/vikrampm1), [Dharmesh Patel (@iamdharmesh)](https://github.com/iamdharmesh), [GitHub Dependabot (@dependabot)](https://github.com/apps/dependabot), [Jer Clarke (@jerclarke)](https://github.com/jerclarke), [Max Garceau (@MaxwellGarceau)](https://github.com/MaxwellGarceau), [Nathan Tetzlaff](), [Romain Deville](https://www.linkedin.com/in/devilleromain/).
+[Mailchimp (@mailchimp)](https://github.com/mailchimp), [Crowd Favorite (@crowdfavorite)](https://github.com/crowdfavorite), [Matthew Richmond (@bigdawggi)](https://github.com/bigdawggi), [Devin Reams (@devinreams)](https://github.com/devinreams), [Alex King (@alexkingorg)](https://github.com/alexkingorg), [Jesse (@jessedp)](https://github.com/jessedp), [Andrew Ellis](awellis@me.com), [Evan Anderson (@ejdanderson)](https://github.com/ejdanderson), [Webb Henderson (@emerywebster)](https://github.com/emerywebster), [Steven Mathias (@ssmathias)](https://github.com/ssmathias), [Jonathan D. Johnson (@jondavidjohn)](https://github.com/jondavidjohn), [Ross Tweedie (@digitales)](https://github.com/digitales), [(@mcwill)](https://github.com/mcwill), [Andrew Austin (@andrewjaustin)](https://github.com/andrewjaustin), [Marc Queralt i Bassa (@MarcQueralt)](https://github.com/MarcQueralt), [Chris Mospaw (@mospaw)](https://github.com/mospaw), [Jonas Stensved (@jstensved)](https://github.com/jstensved), [netboy](netboy@netboy.pl), [Lenin](lenin@tasawr.com), [Bauke Zwaan (@baukezwaan)](https://github.com/baukezwaan), [Jascha Ehrenreich (@jaeh)](https://github.com/jaeh), [Chris Wilcoxson (@slushman)](https://github.com/slushman), [Luke Watts (@thisislawatts)](https://github.com/thisislawatts), [Glenn Ansley (@glennansley)](https://github.com/glennansley), [SiteGround](http://www.siteground.com/wordpress-hosting.htm), [Peter Kahoun](http://kahi.cz/), [Jan Lund](), [Michael Jaekel](), [Ιωάννης Δημοφέρλιας (John Dimoferlias)](), [Tomás Nader](), [Claudia Mansilla](http://cricava.com/), [Helen Urbanik](http://www.motomaania.ee/), [Maxime Toulliou](http://www.maximetoulliou.com/), [שגיב בית](http://www.sagive.co.il), [Okostobi](), [Stefan Des](http://www.stefandes.com), [백선기 (SK Baek)](), [Alexander Roterud aka Defrag](http://www.tigerpews.com), [Filip Stas](http://suddenelfilio.net/), [Maria Manoela Porto](), [Tiago Faria](http://xroot.org), [Alexandru Armin Roșu](), [Илья](http://fatcow.com), [Sebastian Johnsson](http://www.agiley.se/), [Hakan E.](http://kazancexpert.com/), [Josh Grosser (@jgrosser-intuit)](https://github.com/jgrosser-intuit), [10up (@10up)](https://github.com/10up), [Nate Conley (@nateconley)](https://github.com/nateconley), [Darin Kotter (@dkotter)](https://github.com/dkotter), [Jeffrey Paul (@jeffpaul)](https://github.com/jeffpaul), [Eddie Shrake (@eddieshrake)](https://github.com/eddieshrake), [Sumit Bagthariya (@qasumitbagthariya)](https://github.com/qasumitbagthariya), [Vikram Moparthy (@vikrampm1)](https://github.com/vikrampm1), [Dharmesh Patel (@iamdharmesh)](https://github.com/iamdharmesh), [GitHub Dependabot (@dependabot)](https://github.com/apps/dependabot), [Jer Clarke (@jerclarke)](https://github.com/jerclarke), [Max Garceau (@MaxwellGarceau)](https://github.com/MaxwellGarceau), [Nathan Tetzlaff](), [Romain Deville](https://www.linkedin.com/in/devilleromain/), [@joemcgill](https://github.com/joemcgill).
 
 ## Libraries
 
diff --git a/readme.txt b/readme.txt
index 3968b4b2..9cc4d788 100644
--- a/readme.txt
+++ b/readme.txt
@@ -76,6 +76,10 @@ If you are upgrading to version 1.2.1 and you used the widget in your sidebar pr
 
 == Changelog ==
 
+= 2.0.1 - 2026-01-08 =
+* **Fixed:** Plugin check plugin errors to improve overall codebase (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
+* **Changed:** Bump WordPress "tested up to" version 6.9 (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
+
 = 2.0.0 - 2025-08-11 =
 * **Added:** Form templates to the Mailchimp List Subscribe Form block, allowing users to quickly insert and publish specific forms (props [@iamdharmesh](https://github.com/iamdharmesh), [Romain Deville](https://www.linkedin.com/in/devilleromain/), [@vikrampm1](https://github.com/vikrampm1), [@jeffpaul](https://github.com/jeffpaul), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#171](https://github.com/mailchimp/wordpress/pull/171)).
 * **Changed:** Improved navigation and UX enhancements to the plugin settings page (props [@iamdharmesh](https://github.com/iamdharmesh), [Romain Deville](https://www.linkedin.com/in/devilleromain/), [@jeffpaul](https://github.com/jeffpaul), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#169](https://github.com/mailchimp/wordpress/pull/169)).

From 5e50abc9be97fb2619726e5a18edde3f0eeea744 Mon Sep 17 00:00:00 2001
From: Dharmesh Patel <dspatel44@gmail.com>
Date: Fri, 9 Jan 2026 00:45:06 +0530
Subject: [PATCH 4/8] E2E: Try fix Mailchimp login.

---
 tests/cypress/support/commands/mailchimpLogin.js | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/cypress/support/commands/mailchimpLogin.js b/tests/cypress/support/commands/mailchimpLogin.js
index fe217a75..62b1bd35 100644
--- a/tests/cypress/support/commands/mailchimpLogin.js
+++ b/tests/cypress/support/commands/mailchimpLogin.js
@@ -50,6 +50,8 @@ Cypress.Commands.add('mailchimpLogin', (user = null, pass = null) => {
 	});
 
 	cy.popup().find('input#username').clear().type(username, { force: true });
+	cy.popup().find('button[type="submit"]').click({ force: true });
+	cy.wait(5000);
 	cy.popup().find('input#password').clear().type(password, { force: true });
 	cy.popup().find('button[type="submit"]').click({ force: true });
 	cy.wait(10000); // Not a best practice, but did not find a better way to handle this.

From 2b1315e54432c8fd8499b07294ebadbcb3447231 Mon Sep 17 00:00:00 2001
From: Dharmesh Patel <dspatel44@gmail.com>
Date: Fri, 9 Jan 2026 00:57:05 +0530
Subject: [PATCH 5/8] Remove direct access check.

---
 includes/admin/admin-notices.php                      | 5 -----
 includes/admin/templates/activate-account.php         | 4 ----
 includes/admin/templates/create-account-page.php      | 5 -----
 includes/admin/templates/header.php                   | 5 -----
 includes/admin/templates/login-button.php             | 5 -----
 includes/admin/templates/login.php                    | 5 -----
 includes/admin/templates/settings-header.php          | 4 ----
 includes/admin/templates/settings.php                 | 5 -----
 includes/admin/templates/setup-page.php               | 4 ----
 includes/admin/templates/suggest-to-login.php         | 4 ----
 includes/admin/templates/user-sync.php                | 5 -----
 includes/blocks/mailchimp-form-field/field-markup.php | 5 -----
 includes/blocks/mailchimp-form-group/markup.php       | 5 -----
 includes/blocks/mailchimp/markup.php                  | 5 -----
 mailchimp.php                                         | 5 -----
 mailchimp_compat.php                                  | 5 -----
 mailchimp_upgrade.php                                 | 5 -----
 mailchimp_widget.php                                  | 5 -----
 18 files changed, 86 deletions(-)

diff --git a/includes/admin/admin-notices.php b/includes/admin/admin-notices.php
index 163cc06a..16dd25b3 100644
--- a/includes/admin/admin-notices.php
+++ b/includes/admin/admin-notices.php
@@ -7,11 +7,6 @@
 
 namespace Mailchimp\WordPress\Includes\Admin;
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 /**
  * Display success admin notice.
  *
diff --git a/includes/admin/templates/activate-account.php b/includes/admin/templates/activate-account.php
index f7c0ea05..ac642ceb 100644
--- a/includes/admin/templates/activate-account.php
+++ b/includes/admin/templates/activate-account.php
@@ -5,10 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
 ?>
 <div class="mailchimp-sf-confirm-email-wrapper mailchimp-sf-content-box-wrapper <?php echo esc_attr( ( ! $signup_initiated ) ? 'hidden' : '' ); ?>">
 	<div class="mailchimp-sf-confirm-email mailchimp-sf-content-box">
diff --git a/includes/admin/templates/create-account-page.php b/includes/admin/templates/create-account-page.php
index d511e41a..6852d105 100644
--- a/includes/admin/templates/create-account-page.php
+++ b/includes/admin/templates/create-account-page.php
@@ -5,11 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 $admin_email = get_option( 'admin_email' );
 $user        = get_user_by( 'email', $admin_email );
 
diff --git a/includes/admin/templates/header.php b/includes/admin/templates/header.php
index b4bf22e1..e1c8c748 100644
--- a/includes/admin/templates/header.php
+++ b/includes/admin/templates/header.php
@@ -5,11 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 $user         = get_option( 'mc_user' );
 $is_logged_in = ! ( ! $user || ( ! get_option( 'mc_api_key' ) && ! mailchimp_sf_get_access_token() ) );
 ?>
diff --git a/includes/admin/templates/login-button.php b/includes/admin/templates/login-button.php
index dca0048c..971c9664 100644
--- a/includes/admin/templates/login-button.php
+++ b/includes/admin/templates/login-button.php
@@ -5,11 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 $button_text = $login_button_text ?? __( 'Log in', 'mailchimp' );
 ?>
 <button id="mailchimp_sf_oauth_connect" class="button mailchimp-sf-button button-primary">
diff --git a/includes/admin/templates/login.php b/includes/admin/templates/login.php
index 34372441..a8ee6260 100644
--- a/includes/admin/templates/login.php
+++ b/includes/admin/templates/login.php
@@ -5,11 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 ?>
 <div class="wrap">
 	<hr class="wp-header-end" style="display:none;"/>
diff --git a/includes/admin/templates/settings-header.php b/includes/admin/templates/settings-header.php
index 02afb643..e4c3649b 100644
--- a/includes/admin/templates/settings-header.php
+++ b/includes/admin/templates/settings-header.php
@@ -5,10 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
 ?>
 <div class="mailchimp-sf-settings-page-hero-wrapper">
 	<div class="mailchimp-sf-settings-page-hero">
diff --git a/includes/admin/templates/settings.php b/includes/admin/templates/settings.php
index 27a578f4..b657841c 100644
--- a/includes/admin/templates/settings.php
+++ b/includes/admin/templates/settings.php
@@ -5,11 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 use function Mailchimp\WordPress\Includes\Admin\admin_notice_error;
 
 $user         = get_option( 'mc_user' );
diff --git a/includes/admin/templates/setup-page.php b/includes/admin/templates/setup-page.php
index 5a3755fb..b2ce2c2d 100644
--- a/includes/admin/templates/setup-page.php
+++ b/includes/admin/templates/setup-page.php
@@ -5,10 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
 ?>
 <div class="mailchimp-sf-main-setings-wrapper">
 	<div class="mailchimp-sf-main-settings">
diff --git a/includes/admin/templates/suggest-to-login.php b/includes/admin/templates/suggest-to-login.php
index d47d15c6..a05357fa 100644
--- a/includes/admin/templates/suggest-to-login.php
+++ b/includes/admin/templates/suggest-to-login.php
@@ -5,10 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
 ?>
 <div class="mailchimp-sf-suggest-to-login mailchimp-sf-content-box-wrapper hidden">
 	<div class="mailchimp-sf-content-box">
diff --git a/includes/admin/templates/user-sync.php b/includes/admin/templates/user-sync.php
index 7ee2fe20..d1da07b3 100644
--- a/includes/admin/templates/user-sync.php
+++ b/includes/admin/templates/user-sync.php
@@ -5,11 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 global $wp_settings_sections, $wp_settings_fields;
 ?>
 <div class="mailchimp-sf-user-sync-page-wrapper">
diff --git a/includes/blocks/mailchimp-form-field/field-markup.php b/includes/blocks/mailchimp-form-field/field-markup.php
index 8fe3578a..d622ee69 100644
--- a/includes/blocks/mailchimp-form-field/field-markup.php
+++ b/includes/blocks/mailchimp-form-field/field-markup.php
@@ -5,11 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 $list_id                 = $block->context['mailchimp/list_id'] ?? '';
 $show_required_indicator = $block->context['mailchimp/show_required_indicator'] ?? true;
 $template                = $block->context['mailchimp/template'] ?? 'default';
diff --git a/includes/blocks/mailchimp-form-group/markup.php b/includes/blocks/mailchimp-form-group/markup.php
index 33773da3..c2795d8d 100644
--- a/includes/blocks/mailchimp-form-group/markup.php
+++ b/includes/blocks/mailchimp-form-group/markup.php
@@ -5,11 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 $list_id    = $block->context['mailchimp/list_id'] ?? '';
 $group_id   = $attributes['id'] ?? '';
 $label      = $attributes['label'] ?? '';
diff --git a/includes/blocks/mailchimp/markup.php b/includes/blocks/mailchimp/markup.php
index f16b9dc0..2c9a8a80 100644
--- a/includes/blocks/mailchimp/markup.php
+++ b/includes/blocks/mailchimp/markup.php
@@ -5,11 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 // Check if we should display the form.
 if ( ! mailchimp_sf_should_display_form() ) {
 	return;
diff --git a/mailchimp.php b/mailchimp.php
index 8c257874..9654129d 100644
--- a/mailchimp.php
+++ b/mailchimp.php
@@ -34,11 +34,6 @@
  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 // Check if the autoload file exists
 if ( is_readable( __DIR__ . '/vendor/autoload.php' ) ) {
 	require_once __DIR__ . '/vendor/autoload.php';
diff --git a/mailchimp_compat.php b/mailchimp_compat.php
index 98744ab2..c10331a6 100644
--- a/mailchimp_compat.php
+++ b/mailchimp_compat.php
@@ -5,11 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 /* Form Display Functions */
 if ( ! function_exists( 'mc_display_widget' ) ) {
 
diff --git a/mailchimp_upgrade.php b/mailchimp_upgrade.php
index 0ede54ec..debe2b94 100644
--- a/mailchimp_upgrade.php
+++ b/mailchimp_upgrade.php
@@ -5,11 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 /**
  * Check plugin version.
  *
diff --git a/mailchimp_widget.php b/mailchimp_widget.php
index 7c44fbba..3ef5cedf 100644
--- a/mailchimp_widget.php
+++ b/mailchimp_widget.php
@@ -5,11 +5,6 @@
  * @package Mailchimp
  */
 
-// Exit if accessed directly.
-if ( ! defined( 'ABSPATH' ) ) {
-	exit;
-}
-
 /**
  * Displays a Mailchimp Signup Form
  *

From 78a1657bd44e15857b526f0fe76a3795f7d5b501 Mon Sep 17 00:00:00 2001
From: Dharmesh Patel <dspatel44@gmail.com>
Date: Fri, 9 Jan 2026 01:34:12 +0530
Subject: [PATCH 6/8] Remove EOF line and revert name update.

---
 includes/admin/templates/header.php | 2 +-
 mailchimp.php                       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/includes/admin/templates/header.php b/includes/admin/templates/header.php
index e1c8c748..a3a074a0 100644
--- a/includes/admin/templates/header.php
+++ b/includes/admin/templates/header.php
@@ -68,4 +68,4 @@
 			</div>
 		<?php endif; ?>
 	</div>
-</div>
+</div>
\ No newline at end of file
diff --git a/mailchimp.php b/mailchimp.php
index 9654129d..caf1cd26 100644
--- a/mailchimp.php
+++ b/mailchimp.php
@@ -1,6 +1,6 @@
 <?php
 /**
- * Plugin Name:       Mailchimp List Subscribe Form
+ * Plugin Name:       Mailchimp
  * Plugin URI:        https://mailchimp.com/help/connect-or-disconnect-list-subscribe-for-wordpress/
  * Description:       Add a Mailchimp signup form block, widget or shortcode to your WordPress site.
  * Text Domain:       mailchimp

From a2a5e6bc61459b1f2f594b2c808c36b333ecb64e Mon Sep 17 00:00:00 2001
From: Dharmesh Patel <dspatel44@gmail.com>
Date: Fri, 9 Jan 2026 01:38:36 +0530
Subject: [PATCH 7/8] Update changelog.

---
 CHANGELOG.md | 1 +
 readme.txt   | 1 +
 2 files changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3c3580de..03a10cd8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ All notable changes to this project will be documented in this file, per [the Ke
 
 ### Fixed
 
+- Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
 - Plugin check plugin errors to improve overall codebase (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
 
 ### Changed
diff --git a/readme.txt b/readme.txt
index 9cc4d788..ae9b383d 100644
--- a/readme.txt
+++ b/readme.txt
@@ -77,6 +77,7 @@ If you are upgrading to version 1.2.1 and you used the widget in your sidebar pr
 == Changelog ==
 
 = 2.0.1 - 2026-01-08 =
+* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
 * **Fixed:** Plugin check plugin errors to improve overall codebase (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
 * **Changed:** Bump WordPress "tested up to" version 6.9 (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
 

From dbed27259349dcc07825d4f40b84ea8957d92666 Mon Sep 17 00:00:00 2001
From: Dharmesh Patel <dspatel44@gmail.com>
Date: Fri, 9 Jan 2026 03:36:35 +0530
Subject: [PATCH 8/8] Update changelogs.

---
 CHANGELOG.md | 36 ++++++++++++++++++++++++++++++++++++
 readme.txt   | 12 ++++++++++++
 2 files changed, 48 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 03a10cd8..c86e86e7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -44,6 +44,12 @@ All notable changes to this project will be documented in this file, per [the Ke
 
 - Update 10up-toolkit from 6.2.0 to 6.5.0 (props [@iamdharmesh](https://github.com/iamdharmesh), [@dkotter](https://github.com/dkotter) via [#174](https://github.com/mailchimp/wordpress/pull/174)).
 
+## [1.9.1] - 2026-01-08
+
+### Fixed
+
+- Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
+
 ## [1.9.0] - 2025-06-04
 
 ### Added
@@ -54,6 +60,13 @@ All notable changes to this project will be documented in this file, per [the Ke
 
 - Improved the enqueueing of JavaScript scripts and styles (props [@iamdharmesh](https://github.com/iamdharmesh), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#161](https://github.com/mailchimp/wordpress/pull/161)).
 
+## [1.8.1] - 2026-01-08
+
+### Fixed
+
+- Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
+
+
 ## [1.8.0] - 2025-05-08
 
 **Note that this release bumps the WordPress minimum version from 6.3 to 6.4.**
@@ -69,6 +82,12 @@ All notable changes to this project will be documented in this file, per [the Ke
 - Bump WordPress "tested up to" version 6.8 (props [@qasumitbagthariya](https://github.com/qasumitbagthariya), [@dkotter](https://github.com/dkotter) via [#148](https://github.com/mailchimp/wordpress/pull/148)).
 - Bump WordPress minimum supported version from 6.3 to 6.4 (props [@qasumitbagthariya](https://github.com/qasumitbagthariya), [@dkotter](https://github.com/dkotter) via [#148](https://github.com/mailchimp/wordpress/pull/148)).
 
+## [1.7.1] - 2026-01-08
+
+### Fixed
+
+- Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
+
 ## [1.7.0] - 2025-04-08
 
 ### Changed
@@ -102,6 +121,12 @@ All notable changes to this project will be documented in this file, per [the Ke
 - Update all third-party actions our workflows rely on to use versions based on specific commit hashes (props [@dkotter](https://github.com/dkotter), [@jeffpaul](https://github.com/jeffpaul), [@iamdharmesh](https://github.com/iamdharmesh) via [#128](https://github.com/mailchimp/wordpress/pull/128)).
 - Prevent overwriting the release content with the body text provided in the GitHub Action workflow file (props [@iamdharmesh](https://github.com/iamdharmesh), [@dkotter](https://github.com/dkotter) via [#129](https://github.com/mailchimp/wordpress/pull/129)).
 
+## [1.6.4] - 2026-01-08
+
+### Fixed
+
+- Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
+
 ## [1.6.3] - 2025-01-30
 
 ### Added
@@ -220,6 +245,13 @@ All notable changes to this project will be documented in this file, per [the Ke
 - Added ESLint GitHub Action Workflow (props [@dkotter](https://github.com/dkotter), [@jeffpaul](https://github.com/jeffpaul) via [#20](https://github.com/mailchimp/wordpress/pull/20)).
 - Added Standard GitHub Action Workflows (props [@dkotter](https://github.com/dkotter), [@jeffpaul](https://github.com/jeffpaul) via [#21](https://github.com/mailchimp/wordpress/pull/21)).
 
+## 1.5.9 - 2026-01-08
+
+### Fixed
+
+- Provide CSRF hardening for Mailchimp List changes.
+
+
 ## 1.5.8 - 2022-09-26
 
 ### Changed
@@ -365,9 +397,13 @@ All notable changes to this project will be documented in this file, per [the Ke
 [Unreleased]: https://github.com/mailchimp/wordpress/compare/main...develop
 [2.0.1]: https://github.com/mailchimp/wordpress/compare/2.0.0...2.0.1
 [2.0.0]: https://github.com/mailchimp/wordpress/compare/1.9.0...2.0.0
+[1.9.1]: https://github.com/mailchimp/wordpress/compare/1.9.0...1.9.1
 [1.9.0]: https://github.com/mailchimp/wordpress/compare/1.8.0...1.9.0
+[1.8.1]: https://github.com/mailchimp/wordpress/compare/1.8.0...1.8.1
 [1.8.0]: https://github.com/mailchimp/wordpress/compare/1.7.0...1.8.0
+[1.7.1]: https://github.com/mailchimp/wordpress/compare/1.7.0...1.7.1
 [1.7.0]: https://github.com/mailchimp/wordpress/compare/1.6.3...1.7.0
+[1.6.4]: https://github.com/mailchimp/wordpress/compare/1.6.3...1.6.4
 [1.6.3]: https://github.com/mailchimp/wordpress/compare/1.6.2...1.6.3
 [1.6.2]: https://github.com/mailchimp/wordpress/compare/1.6.1...1.6.2
 [1.6.1]: https://github.com/mailchimp/wordpress/compare/1.6.0...1.6.1
diff --git a/readme.txt b/readme.txt
index ae9b383d..91703902 100644
--- a/readme.txt
+++ b/readme.txt
@@ -94,10 +94,16 @@ If you are upgrading to version 1.2.1 and you used the widget in your sidebar pr
 * **Security:** Bump `serialize-javascript` from 6.0.0 to 6.0.2 and `mocha` from 10.4.0 to 11.7.1 (props [@dependabot](https://github.com/apps/dependabot), [@iamdharmesh](https://github.com/iamdharmesh) via [#179](https://github.com/mailchimp/wordpress/pull/179)).
 * **Security:** Bump `http-proxy-middleware` from 2.0.6 to 2.0.9 (props [@dependabot](https://github.com/apps/dependabot), [@iamdharmesh](https://github.com/iamdharmesh) via [#180](https://github.com/mailchimp/wordpress/pull/180)).
 
+= 1.9.1 - 2026-01-08 =
+* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
+
 = 1.9.0 - 2025-06-04 =
 * **Added:** New user synchronization feature that allows syncing WordPress users to Mailchimp (props [@iamdharmesh](https://github.com/iamdharmesh), [@jeffpaul](https://github.com/jeffpaul), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#156](https://github.com/mailchimp/wordpress/pull/156)).
 * **Changed:** Improved the enqueueing of JavaScript scripts and styles (props [@iamdharmesh](https://github.com/iamdharmesh), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#161](https://github.com/mailchimp/wordpress/pull/161)).
 
+= 1.8.1 - 2026-01-08 =
+* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
+
 = 1.8.0 - 2025-05-08 =
 **Note that this release bumps the WordPress minimum version from 6.3 to 6.4.**
 
@@ -107,6 +113,9 @@ If you are upgrading to version 1.2.1 and you used the widget in your sidebar pr
 * **Changed:** Bump WordPress "tested up to" version 6.8 (props [@qasumitbagthariya](https://github.com/qasumitbagthariya), [@dkotter](https://github.com/dkotter) via [#148](https://github.com/mailchimp/wordpress/pull/148)).
 * **Changed:** Bump WordPress minimum supported version from 6.3 to 6.4 (props [@qasumitbagthariya](https://github.com/qasumitbagthariya), [@dkotter](https://github.com/dkotter) via [#148](https://github.com/mailchimp/wordpress/pull/148)).
 
+= 1.7.1 - 2026-01-08 =
+* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
+
 = 1.7.0 - 2025-04-08 =
 * **Changed:** Enhance the Mailchimp List Subscribe Form block to allow for selecting an audience list, reorder fields, toggle field and group visibility, and various other improvements (props [@iamdharmesh](https://github.com/iamdharmesh), [@jeffpaul](https://github.com/jeffpaul), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#126](https://github.com/mailchimp/wordpress/pull/126)).
 * **Changed:** Plugin settings page success and error messages will now use WP admin notices (props [@MaxwellGarceau](https://github.com/MaxwellGarceau), [@jeffpaul](https://github.com/jeffpaul), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya), [@iamdharmesh](https://github.com/iamdharmesh) via [#85](https://github.com/mailchimp/wordpress/pull/85)).
@@ -121,6 +130,9 @@ If you are upgrading to version 1.2.1 and you used the widget in your sidebar pr
 * **Removed:** The "Remove Mailchimp CSS" settings from the Mailchimp settings page (props [@iamdharmesh](https://github.com/iamdharmesh), [@jeffpaul](https://github.com/jeffpaul), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#126](https://github.com/mailchimp/wordpress/pull/126)).
 * **Security:** Bump `express` from 4.21.0 to 4.21.2 (props [@dependabot](https://github.com/apps/dependabot), [@iamdharmesh](https://github.com/iamdharmesh), [@dkotter](https://github.com/dkotter) via [#125](https://github.com/mailchimp/wordpress/pull/125)).
 
+= 1.6.4 - 2026-01-08 =
+* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
+
 = 1.6.3 - 2025-01-30 =
 * **Added:** Transform the `mailchimp_sf_shortcode` shortcode to the Mailchimp List Subscribe Form block (props [@MaxwellGarceau](https://github.com/qasumitbagthariya), [@jeffpaul](https://github.com/vikrampm1), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#84](https://github.com/mailchimp/wordpress/pull/84)).
 * **Removed:** Deprecated Sopresto code (props [@MaxwellGarceau](https://github.com/qasumitbagthariya), [@jeffpaul](https://github.com/vikrampm1), [@dkotter](https://github.com/dkotter) via [#98](https://github.com/mailchimp/wordpress/pull/98)).