MailerLite – WooCommerce integration

MailerLite – WooCommerce integration has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), SQL Injection.

Every one of the 4 issues recorded for MailerLite – WooCommerce integration has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. MailerLite – WooCommerce integration is installed on roughly 30,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

5.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all MailerLite – WooCommerce integration vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2025-67945

MailerLite – WooCommerce integration <= 3.1.2 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

4 records


2026-01-20 00:00	MailerLite – WooCommerce integration <= 3.1.2 - Unauthenticated SQL Injection MailerLite <= 3.1.2	`CVE-2025-67945`	7.5 High	NumeX	Yes
2025-12-15 16:26	MailerLite - WooCommerce integration <= 3.1.3 - Missing Authorization to Data Deletion MailerLite <= 3.1.3	`CVE-2026-1000`	6.5 Medium	shark3y	Yes
2024-01-08 00:00	MailerLite – WooCommerce integration <= 2.0.8 - Missing Authorization via Multiple Functions MailerLite <= 2.0.8	`CVE-2023-52227`	4.3 Medium	Abdi Pranata	Yes
2024-01-08 00:00	MailerLite – WooCommerce integration <= 2.0.8 - Cross-Site Request Forgery via Multiple AJAX Functions MailerLite <= 2.0.8	`CVE-2023-52223`	5.4 Medium	Brandon James Roldan (tomorrowisnew)	Yes

Showing 1–4 of 4 reports

Latestv3.1.26

MailerLite – WooCommerce integration

Author

MailerLite

2.8(64)

56/100

Last Updated

2026-09-01 (12d ago)

Active Installs

30,000+

Downloads

1,600,617

Requires WP

3.0.1+

Requires PHP

7.2.5+

Tested up to

WP 6.8.8

Created

2017-05-11 (10y ago)

Requires Plugins

woocommerce

Powerful e-commerce email marketing tools that are easy to use. Grow your store with automated emails, pop-ups, product blocks, sales tracking + more. OFFICIAL PLUGIN FEATURES Checkout integration Select between multiple positions Show/hide checkbox Enable/disable double opt-in Product importing Sales tracking and campaign ROI Customize checkbox label via settings page Forward order data to MailerLite Setup order tracking MailerLite custom fields Setup order related MailerLite segments Set up automation triggered by recent purchases Abandoned cart emails Subscribe pop-ups Regular updates and improvements: Check out the changelog Quickstart Enter your MailerLite API key For e-commerce tracking on campaigns generate a consumer key + secret with read rights Select your default list/group Enable checkout integration Credits Plugin created with the official MailerLite API.

View on WordPress.org