CVE Database /
CVE-2025-67945
CVE · Critical
CVE-2025-67945 — MailerLite – WooCommerce integration [woo-mailerlite] < 3.1.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-67945
|
MailerLite – WooCommerce integration [woo-mailerlite] < 3.1.3 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
Critical
9.3
|
< 3.1.3
|
3.1.3 |
2026-01-20 |
—
|
CVE-2025-67945
The MailerLite – WooCommerce integration plugin for WordPress contains a flaw in versions up to 3.1.2, allowing malicious input to be injected into database queries without proper validation. This vulnerability enables unauthorized access to sensitive data within the database by appending additional SQL commands to existing queries. The issue arises from inadequate protection of user-supplied parameters and insufficient modification of existing SQL code.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings