MailerLite – Signup forms (official)

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   MailerLite – Signup forms (official)

Information

Software Type Plugin
Software Slug official-mailerlite-sign-up-forms (view on wordpress.org)
Software Status Active
Software Author mailerlite
Software Downloads 1,594,848
Software Active Installs 80,000
Software Record Last Updated May 2, 2024

6 Vulnerabilities

MailerLite – Signup forms (official) 1.5.0 - 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-1386
Apr 29, 2024
Researcher: Richard Telleng (stueotue)
MailerLite – Signup forms (official) <= 1.7.6 - Missing Authorization
5.3
CVE-2024-2797
Apr 29, 2024
Researcher: Krzysztof Zając
MailerLite – Signup forms (official) <= 1.5.7 - Cross-Site Request Forgery
8.8
CVE-2022-33201
Aug 1, 2022
Researcher: Muhammad Daffa
MailerLite - Signup forms <= 1.5.3 - Reflected Cross-Site Scripting
6.1
CVE-2022-1604
May 18, 2022
Researcher: Utkarsh Agrawal
MailerLite Signup Forms < 1.4.4 - Unauthenticated SQL Injection
9.8
CVE ID Unknown
May 22, 2020
Researcher: Patchstack
MailerLite – Signup forms <= 1.4.4 - Cross-Site Request Forgery
5.4
CVE ID Unknown
May 22, 2020
Researcher: Patchstack
Title CVE ID CVSS Researchers Date
MailerLite – Signup forms (official) 1.5.0 - 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1386 6.4 Richard Telleng (stueotue) April 29, 2024
MailerLite – Signup forms (official) <= 1.7.6 - Missing Authorization CVE-2024-2797 5.3 Krzysztof Zając April 29, 2024
MailerLite – Signup forms (official) <= 1.5.7 - Cross-Site Request Forgery CVE-2022-33201 8.8 Muhammad Daffa August 1, 2022
MailerLite - Signup forms <= 1.5.3 - Reflected Cross-Site Scripting CVE-2022-1604 6.1 Utkarsh Agrawal May 18, 2022
MailerLite Signup Forms < 1.4.4 - Unauthenticated SQL Injection 9.8 Patchstack May 22, 2020
MailerLite – Signup forms <= 1.4.4 - Cross-Site Request Forgery 5.4 Patchstack May 22, 2020

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation