MailerLite vulnerabilities
We track 3 vulnerabilities in MailerLite products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2026.
Latest MailerLite vulnerabilities
- 9.3 Critical severity
MailerLite – WooCommerce integration: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MailerLite MailerLite – WooCommerce integration woo-mailerlite allows SQL Injection.This issue affects MailerLite – WooCommerce integration: from n/a through
- 8.8 High severity
MailerLite – WooCommerce integration: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects MailerLite – WooCommerce integration: from n/a through 2.0.8.
- 8.8 High severity
MailerLite (WordPress plugin): Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in MailerLite – Signup forms (official) plugin <= 1.5.7 at WordPress allows an attacker to change the API key.