CVE-2026-1000

The MailerLite - WooCommerce integration plugin for WordPress is vulnerable to unauthorized data modification and deletion in all versions up to, and including, 3.1.3. This is due to missing capability checks on the resetIntegration() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the plugin's integration settings, delete all plugin options, and drop the plugin's database tables (woo_mailerlite_carts and woo_mailerlite_jobs), resulting in complete loss of plugin data including customer abandoned cart information and sync job history.

• CWE-862

• https://plugins.trac.wordpress.org/browser/woo-mailerlite/tags/3.1.3/admin/controllers/WooMailerLiteAdminSettingsController.php#L231
• https://plugins.trac.wordpress.org/browser/woo-mailerlite/tags/3.1.3/includes/WooMailerLite.php#L127
• https://plugins.trac.wordpress.org/browser/woo-mailerlite/tags/3.1.3/includes/migrations/WooMailerLiteMigration.php#L33
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3415073%40woo-mailerlite%2Ftrunk&old=3399626%40woo-mailerlite%2Ftrunk&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/e20deec4-f40c-4bd3-91f7-6a9d643a5520?source=cve

Published

Jan 16, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-0994A denial-of-service (DoS) vulnerability exists in google.pro…7.5
• CVE-2026-0995An issue has been identified in Arm C1-Pro before r1p2-50eac…3.6
• CVE-2026-0996The Fluent Forms plugin for WordPress is vulnerable to Store…6.4
• CVE-2026-0997Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11…4.3
• CVE-2026-0998Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11…4.3
• CVE-2026-0999Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11…4.3
• CVE-2026-10000Use after free in Passwords in Google Chrome on Windows prio…8.3
• CVE-2026-10001Use after free in PerformanceManager in Google Chrome prior …8.3
• CVE-2026-10002Use after free in PDFium in Google Chrome prior to 148.0.777…8.8
• CVE-2026-10003Use after free in Views in Google Chrome prior to 148.0.7778…7.5
• CVE-2026-10004Insufficient validation of untrusted input in Passwords in G…6.5
• CVE-2026-10005Use after free in WebAppInstalls in Google Chrome on Mac pri…7.5