Skip to content
OpenAdvisories

Vendor

Constant Contact

7 known vulnerabilities.

Constant Contact at a glance

Last 12 months
2
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 1 vulnerability Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 1 vulnerability June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202610
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202510
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202410

Products

Creative Mail (WordPress plugin) 3 Constant Contact Forms 2 Creative Mail – Easier WordPress & WooCommerce Email Marketing 1 Constant Contact + WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • High 7.5
    CVE-2026-3985

    Creative Mail – Easier WordPress & WooCommerce Email Marketing <= 1.6.9 - Unauthenticated SQL Injection via 'checkout_uuid' Parameter

    The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection via the 'checkout_uuid' parameter in all versions up to, and including, 1.6.9. This is due to insufficient escaping on the user supplied par…

    Constant Contact Creative Mail – Easier WordPress & WooCommerce Email Marketing Web / CMS
  • Medium 5.3
    CVE-2025-67580

    WordPress Constant Contact + WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Constant Contact Constant Contact + WooCommerce constant-contact-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact + WooCommerce: from n/a through <= …

    Constant Contact Constant Contact + WooCommerce Web / CMS
  • Medium 4.3
    CVE-2023-34387

    WordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3.

    Constant Contact Constant Contact Forms
  • Medium 5.3
    CVE-2023-52208

    WordPress Constant Contact Forms Plugin <= 2.4.2 is vulnerable to Sensitive Data Exposure

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Constant Contact Constant Contact Forms.This issue affects Constant Contact Forms: from n/a through 2.4.2.

    Constant Contact Constant Contact Forms
  • Medium 5.4
    CVE-2022-44740

    WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Creative Mail plugin <= 1.5.4 on WordPress.

    Constant Contact Creative Mail (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-40687

    WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress.

    Constant Contact Creative Mail (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-40686

    WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress.

    Constant Contact Creative Mail (WordPress plugin) Web / CMS