Medium · 6.3 CVE-2022-33201 EUVD-2022-36244GHSA-gcwh-pffh-m97w

WordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerability

Published Aug 5, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: MailerLite Product: MailerLite (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in MailerLite – Signup forms (official) plugin <= 1.5.7 at WordPress allows an attacker to change the API key.

Affected products

Vendor	Product	Affected	Fixed
MailerLite	MailerLite (WordPress plugin)	<= 1.5.7 – ≤ 1.5.7	—

References

https://patchstack.com/database/vulnerability/official-mailerlite-sign-up-forms/wordpress-mailerlite-signup-forms-official-plugin-1-5-7-cross-site-request-forgery-csrf-vulnerability
https://wordpress.org/plugins/official-mailerlite-sign-up-forms/#developers