WordPress plugin
MailerLite – WooCommerce integration security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium3
- Low0
All MailerLite – WooCommerce integration vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated SQL Injection ≤3.1.2Update to 3.1.3 | CVE-2025-67945 | |
| Medium6.5 | WooCommerce integration <= 3.1.3 - Missing Authorization to Data Deletion ≤3.1.3Update to 3.1.4 | CVE-2026-1000 | |
| Medium4.3 | Missing Authorization via Multiple Functions ≤2.0.8Update to 2.0.9 | CVE-2023-52227 | |
| Medium5.4 | Cross-Site Request Forgery via Multiple AJAX Functions ≤2.0.8Update to 2.0.9 | CVE-2023-52223 |
- High7.5Unauthenticated SQL Injection
≤3.1.2Update to 3.1.3
- Medium6.5WooCommerce integration <= 3.1.3 - Missing Authorization to Data Deletion
≤3.1.3Update to 3.1.4
- Medium4.3Missing Authorization via Multiple Functions
≤2.0.8Update to 2.0.9
- Medium5.4Cross-Site Request Forgery via Multiple AJAX Functions
≤2.0.8Update to 2.0.9
MailerLite – WooCommerce integration: common questions
Does MailerLite – WooCommerce integration have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in MailerLite – WooCommerce integration: 1 high, 3 medium. None are known to affect version null.
How do I check which version of MailerLite – WooCommerce integration I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent MailerLite – WooCommerce integration vulnerability?
CVE-2025-67945, published Jan 20, 2026: MailerLite – WooCommerce integration <= 3.1.2 - Unauthenticated SQL Injection. Severity: High (CVSS 7.5).
Is any MailerLite – WooCommerce integration vulnerability listed in CISA KEV?
No. None of the known MailerLite – WooCommerce integration vulnerabilities is currently listed in the CISA KEV catalog.