Vulnerabilidades em MailerLite
9 resultadosAnálise Vexday
MailerLite apresenta footprint reduzido com 5 CVEs identificadas, nenhuma atualmente sob exploração ativa (KEV). O risco é contido por não haver vulnerabilidades críticas recentes, embora exista 1 falha crítica relacionada a falsificação de solicitação entre sites (CWE-352), o que demanda atenção em contextos de autenticação sensível.
CVE-2024-2797MEDIUMMailerLite – Signup forms (official) <= 1.7.6 - Missing AuthorizationEPSS 0.5%CVE-2025-67945CRITICALWordPress MailerLite – WooCommerce integration plugin <= 3.1.2 - SQL Injection vulnerabilityEPSS 0.4%CVE-2024-1386MEDIUMThe MailerLite – Signup forms (official) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in EPSS 0.4%CVE-2023-52227MEDIUMWordPress MailerLite – WooCommerce integration plugin <= 2.0.8 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2022-33201MEDIUMWordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.4%CVE-2025-13993MEDIUMMailerLite – Signup forms (official) <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-1000MEDIUMMailerLite - WooCommerce integration <= 3.1.3 - Missing Authorization to Data DeletionEPSS 0.3%CVE-2026-25420MEDIUMWordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2023-52223MEDIUMWordPress MailerLite – WooCommerce integration Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%