Vulnerabilities

TI-2026-46717 CVE-2026-65547 · GHSA-3jfp-8ffg-83g9

WordPress Creative Mail plugin <= 1.6.9 - SQL Injection vulnerability

LOW 37

Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00357 Published 2026-08-06 No fix listed CWE-89

TI-2026-03449 CVE-2026-3985 · GHSA-mqm2-57wm-gj43

SQL injection in Constant Contact Creative Mail – Easier WordPress & WooCommerce Email…

LOW 39

The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection via the 'checkout_uuid' parameter in all versions up to, and including, 1.6.9.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00405 Published 2026-05-20 No fix listed CWE-89

TI-2025-41334 CVE-2025-67580 · GHSA-52v3-p44c-8m9p

WordPress Constant Contact + WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Constant Contact Constant Contact + WooCommerce constant-contact-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Cont…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00209 Published 2025-12-09 No fix listed CWE-862

TI-2023-17217 CVE-2023-34387 · GHSA-g7vj-553h-hjwx

WordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0047 Published 2024-12-13 No fix listed CWE-862

TI-2023-28636 CVE-2023-52208 · GHSA-65ph-fjq3-j5hx

WordPress Constant Contact Forms Plugin <= 2.4.2 is vulnerable to Sensitive Data Exposure

LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Constant Contact Constant Contact Forms.This issue affects Constant Contact Forms: from n/a through 2.4.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00443 Published 2024-01-08 No fix listed CWE-200

TI-2022-22029 CVE-2022-44740 · GHSA-hr35-x9rx-cc59

WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

LOW 38

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Creative Mail plugin <= 1.5.4 on WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2022-11-18 No fix listed CWE-352

TI-2022-19324 CVE-2022-40687 · GHSA-7vjh-7q2m-9fx5

WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00772 Published 2022-11-18 No fix listed CWE-352

TI-2022-19323 CVE-2022-40686 · GHSA-jpfh-g4ff-w273

WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00293 Published 2022-11-18 No fix listed CWE-352

TI-2021-06426 CVE-2021-24134 · GHSA-5gq5-98jg-gqqf

Constant Contact Forms < 1.8.8 - Multiple Authenticated Stored XSS

LOW 23

Unvalidated input and lack of output encoding in the Constant Contact Forms WordPress plugin, versions before 1.8.8, lead to multiple Stored Cross-Site Scripting vulnerabilities, which allowed high-privileged user (Edito…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00654 Published 2021-03-18 Fixed in 1.8.8 CWE-79

Vulnerabilities

Filters