Beta

Report

MailerLite – WooCommerce integration <= 2.0.8 is vulnerable to Broken Access Control vulnerability

Subscriber
Published
2024-01-07

The MailerLite – WooCommerce integration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple functions in versions up to, and including, 2.0.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthorized actions.

CVSS

Score:4.3

Severity:Medium

Version: 2.0.8

There is a patch available in v2.0.9 and we strongly recommend you update to this version as soon as possible.