Vulnerabilidades em mailerlite
9 resultadosAnálise Vexday
Mailerlite apresenta 4 vulnerabilidades cadastradas sem histórico recente de exposição ativa ou crítica. Nenhuma está sob ataque conhecido (KEV) e todas precedem os últimos 90 dias, indicando risco residual baixo. A fraqueza predominante é controle de acesso inadequado (CWE-862), típica em plataformas SaaS, demandando validação periódica de permissões.
CVE-2024-2797MEDIUMMailerLite – Signup forms (official) <= 1.7.6 - Missing AuthorizationEPSS 0.5%CVE-2025-67945CRITICALWordPress MailerLite – WooCommerce integration plugin <= 3.1.2 - SQL Injection vulnerabilityEPSS 0.4%CVE-2024-1386MEDIUMThe MailerLite – Signup forms (official) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in EPSS 0.4%CVE-2023-52227MEDIUMWordPress MailerLite – WooCommerce integration plugin <= 2.0.8 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2022-33201MEDIUMWordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.4%CVE-2025-13993MEDIUMMailerLite – Signup forms (official) <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-1000MEDIUMMailerLite - WooCommerce integration <= 3.1.3 - Missing Authorization to Data DeletionEPSS 0.3%CVE-2026-25420MEDIUMWordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2023-52223MEDIUMWordPress MailerLite – WooCommerce integration Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%