PT-2026-4028 · Mailerlite · Mailerlite – Woocommerce Integration

Published 2026-01-22 · Updated 2026-01-25 · CVE-2025-67945

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions MailerLite – WooCommerce integration versions through 3.1.2

Description The MailerLite – WooCommerce integration contains a flaw related to improper neutralization of special elements within SQL commands, potentially leading to SQL injection. The issue exists due to insufficient input validation, which could allow an attacker to manipulate SQL queries. The vulnerable component is the MailerLite – WooCommerce integration.

Recommendations Update MailerLite – WooCommerce integration to a version later than 3.1.2.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-67945

Affected Products

Mailerlite – Woocommerce Integration

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-67945 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/woo-mailerlite/vulnerability/wordpress-mailerlite-woocommerce-integration-plugin-3-1-2-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2015362536728916174 · Twitter Post