Mailerlite

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-52223 Feb 28, 17:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in MailerLite MailerLite - WooCommerce integration.0.8. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Mailerlite

NVD

CVSS 3.1

5.4

EPSS

0.1%

CVE-2022-33201 Aug 05, 16:15 HIGH PATCH This Week

Cross-Site Request Forgery (CSRF) vulnerability in MailerLite - Signup forms (official) plugin <= 1.5.7 at WordPress allows an attacker to change the API key. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

WordPress CSRF Wordpress Plugin Mailerlite Mailerlite Signup Forms

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2022-1604 Jun 13, 13:15 MEDIUM POC This Month

The MailerLite WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Mailerlite Mailerlite Signup Forms

NVD WPScan

CVSS 3.1

6.1

EPSS

0.8%

CVE-2023-52223

EPSS 0% CVSS 5.4

MEDIUM This Month

WordPress CSRF Mailerlite

NVD

CVE-2022-33201

EPSS 0% CVSS 8.8

HIGH PATCH This Week

WordPress CSRF Wordpress Plugin +2

NVD

CVE-2022-1604

EPSS 1% CVSS 6.1

MEDIUM POC This Month

WordPress XSS Mailerlite +1

NVD WPScan