Vulnerabilities / MailerLite – Signup forms (official)
MailerLite – Signup forms (official) vulnerabilities
Advisories WPSec published for MailerLite – Signup forms (official). Other sources may list more. Its attack surface: MailerLite – Signup forms (official) on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-28 | WPSEC-2026-1819 | MailerLite – Signup forms (official) <= 1.7.26 - Authenticated (Editor+) Missing Authorization to Embedded Form Modification | Low 2.7 | 1.7.27 |
| 2026-10-28 | WPSEC-2026-1818 | MailerLite – Signup forms (official) <= 1.7.26 - Authenticated (Editor+) Stored Cross-Site Scripting via Form Field Types, Group Names, and Embedded Form Name | Medium 5.5 | 1.7.27 |
License: CC BY 4.0