Constant Contact
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Creative Mail (WordPress plugin) | 3 | – | Nov 18, 2022 |
| Constant Contact Forms | 2 | – | Dec 13, 2024 |
| Constant Contact + WooCommerce | 1 | – | Dec 9, 2025 |
Exploited and recent CVEs
- CVE-2025-67580 WordPress Constant Contact + WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability 0.2%
- CVE-2023-34387 WordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerability 0.5%
- CVE-2023-52208 WordPress Constant Contact Forms Plugin <= 2.4.2 is vulnerable to Sensitive Data Exposure 0.4%
- CVE-2022-44740 WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities 0.3%
- CVE-2022-40687 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability 0.8%
- CVE-2022-40686 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability 0.3%