5 matches found
CVE-2025-67945 WordPress MailerLite – WooCommerce integration plugin <= 3.1.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MailerLite MailerLite – WooCommerce integration woo-mailerlite allows SQL Injection.This issue affects MailerLite – WooCommerce integration: from n/a through = 3.1.2...
CVE-2026-1000
The MailerLite - WooCommerce integration plugin for WordPress is vulnerable to unauthorized data modification and deletion in all versions up to, and including, 3.1.3. This is due to missing capability checks on the resetIntegration function. This makes it possible for authenticated attackers, wi...
CVE-2026-1000
The CVE-2026-1000 entry describes a data-destructive vulnerability in the MailerLite – WooCommerce integration for WordPress (versions up to 3.1.3). Root cause: missing capability checks on resetIntegration(), enabling authenticated users with Subscriber-level access or higher to modify data it s...
CVE-2023-52223
CVE-2023-52223 concerns a Cross-Site Forgery vulnerability in the WordPress MailerLite – WooCommerce integration plugin, affected versions
WordPress MailerLite – WooCommerce integration Plugin <= 2.0.8 is vulnerable to Broken Access Control
Software MailerLite – WooCommerce integration Type Plugin Vulnerable versions = 2.0.8 Fixed in 2.0.9 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-52227 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ca57f2fa08b6 Credits Abdi...