Vulnerabilities and Security Researches

MailerLite – Signup forms (official), CVE-2022-33201

CVE, Research URL: CVE-2022-33201
Home page URL: Security reports for MailerLite – Signup forms (official)
Application: MailerLite – Signup forms (official)
Published on: Aug 05, 2022
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in MailerLite – Signup forms (official) plugin <= 1.5.7 at WordPress allows an attacker to change the API key.
Affected versions: max 1.4.5.
Status: vulnerable