cleantalk
Vulnerabilities and Security Researches

MailerLite – Signup forms (official), CVE-2026-25420

CVE, Research URL

CVE-2026-25420

Published on
Feb 19, 2026
Research Description
Missing Authorization vulnerability in MailerLite MailerLite official-mailerlite-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailerLite: from n/a through <= 1.7.18.
Affected versions
max 1.7.18.
Status
vulnerable