Mailerlite Mailerlite Signup Forms
2 CVEs affecting Mailerlite Mailerlite Signup Forms. Latest disclosed: 2022-08-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-33201 | Medium | 6.3 | 2022-08-05 | Cross-Site Request Forgery (CSRF) vulnerability in MailerLite – Signup forms (official) plugin <= 1.5.7 at WordPress allows an attacker to change the API key. |
CVE-2022-1604 | Medium | 6.1 | 2022-06-13 | The MailerLite WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site… |