mailerlite — Vulnerabilities & Security Advisories 9

MailerLite provides email marketing and automation services for businesses. Historically, vulnerabilities have included stored cross-site scripting (XSS), remote code execution (RCE), and privilege escalation flaws, often stemming from input validation failures and insecure direct object references. The platform has addressed multiple security issues, with nine CVEs recorded to date. While no major public security incidents have been widely reported, the consistent discovery of vulnerabilities highlights ongoing challenges in securing complex web applications with extensive user interaction and data handling capabilities.