Constant Contact

Products

ProductCVEsExploitedLatest
Creative Mail (WordPress plugin)3–Nov 18, 2022
Constant Contact Forms2–Dec 13, 2024
Constant Contact + WooCommerce1–Dec 9, 2025

Exploited and recent CVEs

  • CVE-2025-67580 Medium 5.3 WordPress Constant Contact + WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability 0.2%
  • CVE-2023-34387 Medium 4.3 WordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerability 0.5%
  • CVE-2023-52208 Medium 5.3 WordPress Constant Contact Forms Plugin <= 2.4.2 is vulnerable to Sensitive Data Exposure 0.4%
  • CVE-2022-44740 Medium 5.4 WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities 0.3%
  • CVE-2022-40687 Medium 5.4 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability 0.8%
  • CVE-2022-40686 Medium 5.4 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability 0.3%