Constant Contact

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Constant Contact records in CISA KEV

No Constant Contact vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Creative Mail · all components

TI-2022-19324 CVE-2022-40687 · GHSA-7vjh-7q2m-9fx5

LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00772 Published 2022-11-18 No fix listed CWE-352

TI-2022-22029 CVE-2022-44740 · GHSA-hr35-x9rx-cc59

LOW 38

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Creative Mail plugin <= 1.5.4 on WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2022-11-18 No fix listed CWE-352

TI-2022-19323 CVE-2022-40686 · GHSA-jpfh-g4ff-w273

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00293 Published 2022-11-18 No fix listed CWE-352