Vulnerabilities

TI-2023-28636 CVE-2023-52208 · GHSA-65ph-fjq3-j5hx

WordPress Constant Contact Forms Plugin <= 2.4.2 is vulnerable to Sensitive Data Exposure

LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Constant Contact Constant Contact Forms.This issue affects Constant Contact Forms: from n/a through 2.4.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00443 Published 2024-01-08 No fix listed CWE-200

TI-2021-06426 CVE-2021-24134 · GHSA-5gq5-98jg-gqqf

Constant Contact Forms < 1.8.8 - Multiple Authenticated Stored XSS

LOW 23

Unvalidated input and lack of output encoding in the Constant Contact Forms WordPress plugin, versions before 1.8.8, lead to multiple Stored Cross-Site Scripting vulnerabilities, which allowed high-privileged user (Edito…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00654 Published 2021-03-18 Fixed in 1.8.8 CWE-79

Vulnerabilities

Filters

WordPress Constant Contact Forms Plugin <= 2.4.2 is vulnerable to Sensitive Data Exposure

Constant Contact Forms < 1.8.8 - Multiple Authenticated Stored XSS