CVE-2022-33201

Cross-Site Request Forgery (CSRF) vulnerability in MailerLite – Signup forms (official) plugin <= 1.5.7 at WordPress allows an attacker to change the API key.

Score

CVSS 3.1 8.8 High

Status

Modified - audit@patchstack.com

Published

2022-08-05

Last modified

2026-04-28

Weaknesses

CWE-352

Affected products

• Mailerlite Signup Forms (Mailerlite)
• Mailerlite Wordpress Plugin (Mailerlite)

References

• https://patchstack.com/database/vulnerability/official-mailerlite-sign-up-forms/wordpress-mailerlite-signup-forms-offic…
• https://wordpress.org/plugins/official-mailerlite-sign-up-forms/#developers