WordPress plugin
MailerLite – Signup forms (official) security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High1
- Medium7
- Low0
All MailerLite – Signup forms (official) vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Cross-Site Request Forgery ≤1.5.7Update to 1.5.8 | CVE-2022-33201 | |
| Critical9.8 | Unauthenticated SQL Injection <1.4.4Update to 1.4.4 | — |
- High8.8Cross-Site Request Forgery
≤1.5.7Update to 1.5.8
- Critical9.8Unauthenticated SQL Injection
<1.4.4Update to 1.4.4
MailerLite – Signup forms (official): common questions
Does MailerLite – Signup forms (official) have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in MailerLite – Signup forms (official): 1 critical, 1 high, 7 medium. None are known to affect version null.
How do I check which version of MailerLite – Signup forms (official) I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent MailerLite – Signup forms (official) vulnerability?
CVE-2026-3253, published Sep 23, 2026: MailerLite – Signup forms (official) <= 1.7.21 - Missing Authorization to Authenticated (Contributor+) Form Creation and Deletion. Severity: Medium (CVSS 4.3).
Is any MailerLite – Signup forms (official) vulnerability listed in CISA KEV?
No. None of the known MailerLite – Signup forms (official) vulnerabilities is currently listed in the CISA KEV catalog.