MMailerLite

Products

Exploited and recent CVEs

• CVE-2026-3253 Medium 4.3 MailerLite – Signup forms (official) <= 1.7.21 - Missing Authorization to Authenticated (Contributor+) Form Creation and Deletion 0.2%
• CVE-2026-25420 Medium 4.3 WordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerability 0.3%
• CVE-2025-67945 Critical 9.3 WordPress MailerLite – WooCommerce integration plugin <= 3.1.2 - SQL Injection vulnerability 0.4%
• CVE-2026-1000 Medium 6.5 MailerLite - WooCommerce integration <= 3.1.3 - Missing Authorization to Data Deletion 0.3%
• CVE-2025-13993 Medium 5.5 MailerLite – Signup forms (official) <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
• CVE-2023-52227 Medium 4.3 WordPress MailerLite – WooCommerce integration plugin <= 2.0.8 - Broken Access Control vulnerability 0.4%
• CVE-2024-2797 Medium 5.3 MailerLite – Signup forms (official) <= 1.7.6 - Missing Authorization 0.5%
• CVE-2024-1386 Medium 6.4 The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions 1.5.0 to 1.7.6 due to insufficient input sanitizati 0.4%
• CVE-2023-52223 Medium 5.4 WordPress MailerLite – WooCommerce integration Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
• CVE-2022-33201 Medium 6.3 WordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerability 0.4%