Approved changes feed: RSS · Atom

cpe:2.3:a:mailerlite:mailerlite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMailerlite (6c028a4c-0396-5685-9848-6939554f7358)
ProductMailerlite (b0f04fe8-25f6-5440-a336-a2a3a9da7f09)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/mailerlite/mailerlite-php purl2cpe 2026-06-01 10:11:50.185512
pkg:github/mailerlite/mailerlite-php purl2cpe 2026-06-01 10:11:50.185515

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25420 vulnerable 2026-06-08 07:53:19.792246 WordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in MailerLite MailerLite official-mailerlite-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailerLite: from n/a through <= 1.7.18.
Published: 2026-02-19T08:27:06.988Z
Updated: 2026-04-28T16:14:58.454Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.