PLUGIN SECURITY
Is Official Mailerlite Sign Up Forms safe?
Add newsletter signup forms to your WordPress site. Subscribers will be saved directly to your MailerLite account. Super easy to set up!
What this plugin does
- Slug:
official-mailerlite-sign-up-forms - Author: MailerLite
- 100000+ active installs
- 60/100 rating (40 reviews on wordpress.org)
- 2485829 all-time downloads
- On WordPress.org since 2014-08-03
formmailerlitenewslettersubscribewebform
Maintenance status
- Latest known version: 1.7.26
- Last updated: 2026-06-26 10:23am GMT
- Tested up to WordPress: 6.8.8
- Requires PHP: 7.2.5+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
6 known CVEs on file for Official Mailerlite Sign Up Forms. Reported between 2020 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-25420 | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.7.19 | Missing Authorization | Medium 4.3 | < 1.7.19 | 1.7.19 | 2026-01-28 | ✓ fixed in latest |
| CVE-2025-13993 | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.7.17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.5 | < 1.7.17 | 1.7.17 | 2025-12-11 | ✓ fixed in latest |
| CVE-2024-2797 | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.7.7 | Missing Authorization | Medium 5.3 | < 1.7.7 | 1.7.7 | 2024-04-29 | ✓ fixed in latest |
| CVE-2024-1386 | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.7.7 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 1.7.7 | 1.7.7 | 2024-04-29 | ✓ fixed in latest |
| — | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.4.5 | — | Unknown | < 1.4.5 | 1.4.5 | 2023-05-25 | ✓ fixed in latest |
| — | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.4.4 | — | Unknown | < 1.4.4 | 1.4.4 | 2023-05-25 | ✓ fixed in latest |
| CVE-2022-33201 | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.5.8 | Cross-Site Request Forgery (CSRF) | Medium 6.3 | < 1.5.8 | 1.5.8 | 2022-08-01 | ✓ fixed in latest |
| CVE-2022-1604 | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.5.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 1.5.4 | 1.5.4 | 2022-05-18 | ✓ fixed in latest |
+ 6 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| — | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.4.4 | — | Unknown | < 1.4.4 | 1.4.4 | 2020-05-25 | ✓ fixed in latest |
| — | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.4.5 | — | Unknown | < 1.4.5 | 1.4.5 | 2020-05-25 | ✓ fixed in latest |
| — | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.4.4 | — | Unknown | < 1.4.4 | 1.4.4 | 2020-05-22 | ✓ fixed in latest |
| — | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.4.5 | — | Unknown | < 1.4.5 | 1.4.5 | 2020-05-22 | ✓ fixed in latest |
| — | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.4.4 | — | Unknown | < 1.4.4 | 1.4.4 | — | ✓ fixed in latest |
| — | MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.4.5 | — | Unknown | < 1.4.5 | 1.4.5 | — | ✓ fixed in latest |
How to fix it
Keep Official Mailerlite Sign Up Forms updated — 1.7.26 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- MC4WP: Mailchimp for WordPress — 1000000+ active installs — 96/100 (1497) — max PHP 8.4
- MW WP Form — 200000+ active installs — 84/100 (23) — max PHP 8.4
- Conditional Fields for Contact Form 7 — 100000+ active installs — 96/100 (166) — max PHP 8.4
- Newsletters, Email Marketing, SMS and Popups by Omnisend — 100000+ active installs — 96/100 (16) — max PHP 8.4
- Contact Form 7 add confirm — 50000+ active installs — 100/100 (4) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.