MailerLite Vulnerabilities and Affected Products
Vulnerabilities associated with MailerLite – WooCommerce integration.
Products
Clear product- MailerLite – WooCommerce integration4 vulnerabilities
- MailerLite – Signup forms (official)3 vulnerabilities
- MailerLite2 vulnerabilities
- MailerLite (WordPress plugin)1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-67945CRITICAL | WordPress MailerLite – WooCommerce integration plugin <= 3.1.2 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MailerLite MailerLite – WooCommerce integration woo-mailerlite allows SQL Injection.This issue affects MailerLite – WooCommerce integration: from n/a through <= 3.1.2. CWE-89Jan 22, 2026 | CVSS9.3v3.1 | EPSS0.38% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-1000MEDIUM | MailerLite - WooCommerce integration <= 3.1.3 - Missing Authorization to Data DeletionThe MailerLite - WooCommerce integration plugin for WordPress is vulnerable to unauthorized data modification and deletion in all versions up to, and including, 3.1.3. This is due to missing capability checks on the resetIntegration() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the plugin's integration settings, delete all plugin options, and drop the plugin's database tables (woo_mailerlite_carts and woo_mailerlite_jobs), result… CWE-862Jan 16, 2026 | CVSS6.5v3.1 | EPSS0.282% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-52227MEDIUM | WordPress MailerLite – WooCommerce integration plugin <= 2.0.8 - Broken Access Control vulnerabilityMissing Authorization vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects MailerLite – WooCommerce integration: from n/a through 2.0.8. CWE-862Jun 11, 2024 | CVSS4.3v3.1 | EPSS0.407% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-52223MEDIUM | WordPress MailerLite – WooCommerce integration Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects MailerLite – WooCommerce integration: from n/a through 2.0.8. CWE-352Feb 28, 2024 | CVSS5.4v3.1 | EPSS0.208% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |