Mailerlite Mailerlite – Signup Forms (Official)
4 CVEs affecting Mailerlite Mailerlite – Signup Forms (Official). Latest disclosed: 2026-09-24. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-1386 | Medium | 6.4 | 2024-05-02 | The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions 1.5.0 to 1… |
CVE-2025-13993 | Medium | 5.5 | 2025-12-12 | The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_description' and 'success_message' par… |
CVE-2024-2797 | Medium | 5.3 | 2024-05-02 | The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to unauthorized plugin setting changes due to a missing capability check on the tog… |
CVE-2026-3253 | Medium | 4.3 | 2026-09-24 | The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the forms… |