MailerLite

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

MailerLite records in CISA KEV

No MailerLite vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mailerlite Signup Forms 2 records LOW Mailerlite 1 record LOW

Records

2 records in Mailerlite Signup Forms · all components

TI-2022-14630 CVE-2022-33201 · GHSA-gcwh-pffh-m97w

WordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in MailerLite – Signup forms (official) plugin <= 1.5.7 at WordPress allows an attacker to change the API key.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00378 Published 2022-08-05 No fix listed CWE-352

TI-2022-01474 CVE-2022-1604 · GHSA-j7x8-rcv8-xg5g

MailerLite < 1.5.4 - Reflected Cross-Site Scripting

LOW 29

The MailerLite WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00862 Published 2022-06-13 Fixed in 1.5.4 CWE-79

Open these records in search →

Critical	1
High	2
Medium	8
Low	0
No CVSS	0