Skip to content
Mailerlite vulnerabilities
Newest
-
mailerlite – signup forms (official)
MailerLite – Signup forms (official) <= 1.7.21 - Missing Authorization to Authenticated (Contributor+) Form Creation and Deletion
CVE-2026-3253
4.3 Medium
-
mailerlite
WordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerability
CVE-2026-25420
4.3 Medium
-
mailerlite – woocommerce integration
WordPress MailerLite – WooCommerce integration plugin <= 3.1.2 - SQL Injection vulnerability
CVE-2025-67945
9.3 Critical
-
mailerlite – woocommerce integration
MailerLite - WooCommerce integration <= 3.1.3 - Missing Authorization to Data Deletion
CVE-2026-1000
6.5 Medium
-
mailerlite – signup forms (official)
MailerLite – Signup forms (official) <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2025-13993
5.5 Medium
-
mailerlite – woocommerce integration
WordPress MailerLite – WooCommerce integration plugin <= 2.0.8 - Broken Access Control vulnerability
CVE-2023-52227
4.3 Medium
-
mailerlite – signup forms (official)
MailerLite – Signup forms (official) <= 1.7.6 - Missing Authorization
CVE-2024-2797
5.3 Medium
-
mailerlite – signup forms (official)
The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2024-1386
6.4 Medium
-
mailerlite, mailerlite – woocommerce integration +1 more
WordPress MailerLite – WooCommerce integration Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-52223
5.4 Medium
-
mailerlite signup forms, (wordpress plugin) +1 more
WordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-33201
6.3 Medium
-
mailerlite – signup forms (official), signup forms, unknown mailerlite – signup forms (official) +2 more
MailerLite < 1.5.4 - Reflected Cross-Site Scripting
CVE-2022-1604
6.1 Medium