Mailerlite

11 CVEs across 5 Mailerlite products. Browse Mailerlite vulnerabilities, severities, and proof-of-concept exploits.

Mailerlite products with known CVEs

ProductCVEs
Mailerlite – Signup Forms (Official)4
Mailerlite – Woocommerce Integration4
Mailerlite2
Mailerlite Signup Forms2
Mailerlite (WordPress Plugin)1
Mailerlite CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-3253Medium4.32026-09-24The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the forms…
CVE-2026-25420Medium4.32026-02-19Missing Authorization vulnerability in MailerLite MailerLite official-mailerlite-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security…
CVE-2025-67945Critical9.32026-01-22Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MailerLite MailerLite – WooCommerce integration woo-maile…
CVE-2026-1000Medium6.52026-01-16The MailerLite - WooCommerce integration plugin for WordPress is vulnerable to unauthorized data modification and deletion in all versions up to, and including…
CVE-2025-13993Medium5.52025-12-12The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_description' and 'success_message' par…
CVE-2023-52227Medium4.32024-06-11Missing Authorization vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects MailerLite – WooCommerce integration: from n/a throug…
CVE-2024-2797Medium5.32024-05-02The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to unauthorized plugin setting changes due to a missing capability check on the tog…
CVE-2024-1386Medium6.42024-05-02The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions 1.5.0 to 1…
CVE-2023-52223Medium5.42024-02-28Cross-Site Request Forgery (CSRF) vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects MailerLite – WooCommerce integration: fro…
CVE-2022-33201Medium6.32022-08-05Cross-Site Request Forgery (CSRF) vulnerability in MailerLite – Signup forms (official) plugin <= 1.5.7 at WordPress allows an attacker to change the API key.
CVE-2022-1604Medium6.12022-06-13The MailerLite WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site…