CVE-2022-33201

CVE-2022-33201 affects the WordPress MailerLite – Signup forms (official) plugin, version 1.5.7 and earlier. The root cause is a missing CSRF check when updating the API key, enabling an attacker to change the API key via CSRF as described in multiple sources. The vulnerability is reported to imp...

CVE-2022-1604

The CVE-2022-1604 entry concerns the MailerLite WordPress plugin prior to version 1.5.4, which does not sanitize or escape a parameter before echoing it in the page, enabling a Reflected Cross-Site Scripting (XSS) vulnerability. Affected software: MailerLite WordPress plugin (pre-1.5.4). Root cau...