WordPress plugin
MailerLite – Signup forms (official) security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High1
- Medium7
- Low0
All MailerLite – Signup forms (official) vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization to Authenticated (Contributor+) Form Creation and Deletion ≤1.7.21Update to 1.7.22 | CVE-2026-3253 | |
| Medium4.3 | Missing Authorization ≤1.7.18Update to 1.7.19 | CVE-2026-25420 | |
| Medium5.5 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤1.7.16Update to 1.7.17 | CVE-2025-13993 | |
| Medium6.4 | 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 1.5.0 – 1.7.6Update to 1.7.7 | CVE-2024-1386 | |
| Medium5.3 | Missing Authorization ≤1.7.6Update to 1.7.7 | CVE-2024-2797 | |
| High8.8 | Cross-Site Request Forgery ≤1.5.7Update to 1.5.8 | CVE-2022-33201 | |
| Medium6.1 | Signup forms <= 1.5.3 - Reflected Cross-Site Scripting ≤1.5.3Update to 1.5.4 | CVE-2022-1604 | |
| Critical9.8 | Unauthenticated SQL Injection <1.4.4Update to 1.4.4 | — | |
| Medium5.4 | Cross-Site Request Forgery <1.4.5Update to 1.4.5 | — |
- Medium4.3Missing Authorization to Authenticated (Contributor+) Form Creation and Deletion
≤1.7.21Update to 1.7.22
- Medium4.3Missing Authorization
≤1.7.18Update to 1.7.19
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
≤1.7.16Update to 1.7.17
- Medium6.41.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
1.5.0 – 1.7.6Update to 1.7.7
- Medium5.3Missing Authorization
≤1.7.6Update to 1.7.7
- High8.8Cross-Site Request Forgery
≤1.5.7Update to 1.5.8
- Medium6.1Signup forms <= 1.5.3 - Reflected Cross-Site Scripting
≤1.5.3Update to 1.5.4
- Critical9.8Unauthenticated SQL Injection
<1.4.4Update to 1.4.4
- Medium5.4Cross-Site Request Forgery
<1.4.5Update to 1.4.5
MailerLite – Signup forms (official): common questions
Does MailerLite – Signup forms (official) have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in MailerLite – Signup forms (official): 1 critical, 1 high, 7 medium. None are known to affect version null.
How do I check which version of MailerLite – Signup forms (official) I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent MailerLite – Signup forms (official) vulnerability?
CVE-2026-3253, published Sep 23, 2026: MailerLite – Signup forms (official) <= 1.7.21 - Missing Authorization to Authenticated (Contributor+) Form Creation and Deletion. Severity: Medium (CVSS 4.3).
Is any MailerLite – Signup forms (official) vulnerability listed in CISA KEV?
No. None of the known MailerLite – Signup forms (official) vulnerabilities is currently listed in the CISA KEV catalog.