MailerLite vulnerabilities
10 published CVEs name MailerLite among the affected products.
- 10Published CVEs10 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-3253
MailerLite – Signup forms (official) <= 1.7.21 - Missing Authorization to Authenticated (Contributor+) Form Creation and Deletion
mailerlite · MailerLite – Signup forms (official)
Medium4.3 - CVE-2026-25420
WordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerability
MailerLite · MailerLite
Medium4.3 - CVE-2025-67945
WordPress MailerLite – WooCommerce integration plugin <= 3.1.2 - SQL Injection vulnerability
MailerLite · MailerLite – WooCommerce integration
Critical9.3 - CVE-2026-1000
MailerLite - WooCommerce integration <= 3.1.3 - Missing Authorization to Data Deletion
mailerlite · MailerLite – WooCommerce integration
Medium6.5 - CVE-2025-13993
MailerLite – Signup forms (official) <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
mailerlite · MailerLite – Signup forms (official)
Medium5.5 - CVE-2023-52227
WordPress MailerLite – WooCommerce integration plugin <= 2.0.8 - Broken Access Control vulnerability
MailerLite · MailerLite – WooCommerce integration
Medium4.3 - CVE-2024-2797
MailerLite – Signup forms (official) <= 1.7.6 - Missing Authorization
mailerlite · MailerLite – Signup forms (official)
Medium5.3 - CVE-2024-1386
The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions 1.5.0 to…
mailerlite · MailerLite – Signup forms (official)
Medium6.4 - CVE-2023-52223
WordPress MailerLite – WooCommerce integration Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)
MailerLite · MailerLite – WooCommerce integration
Medium5.4 - CVE-2022-33201
WordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerability
MailerLite · MailerLite (WordPress plugin)
Medium6.3