MailerLite vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20244
3. 20251
4. 20264

Newest CVEs

• CVE-2026-3253

  MailerLite – Signup forms (official) <= 1.7.21 - Missing Authorization to Authenticated (Contributor+) Form Creation and Deletion

  mailerlite · MailerLite – Signup forms (official)

  Medium4.3
• CVE-2026-25420

  WordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerability

  MailerLite · MailerLite

  Medium4.3
• CVE-2025-67945

  WordPress MailerLite – WooCommerce integration plugin <= 3.1.2 - SQL Injection vulnerability

  MailerLite · MailerLite – WooCommerce integration

  Critical9.3
• CVE-2026-1000

  MailerLite - WooCommerce integration <= 3.1.3 - Missing Authorization to Data Deletion

  mailerlite · MailerLite – WooCommerce integration

  Medium6.5
• CVE-2025-13993

  MailerLite – Signup forms (official) <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site Scripting

  mailerlite · MailerLite – Signup forms (official)

  Medium5.5
• CVE-2023-52227

  WordPress MailerLite – WooCommerce integration plugin <= 2.0.8 - Broken Access Control vulnerability

  MailerLite · MailerLite – WooCommerce integration

  Medium4.3
• CVE-2024-2797

  MailerLite – Signup forms (official) <= 1.7.6 - Missing Authorization

  mailerlite · MailerLite – Signup forms (official)

  Medium5.3
• CVE-2024-1386

  The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions 1.5.0 to…

  mailerlite · MailerLite – Signup forms (official)

  Medium6.4
• CVE-2023-52223

  WordPress MailerLite – WooCommerce integration Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)

  MailerLite · MailerLite – WooCommerce integration

  Medium5.4
• CVE-2022-33201

  WordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerability

  MailerLite · MailerLite (WordPress plugin)

  Medium6.3