Skip to content
OpenAdvisories

Product · mailmunch

Constant Contact Forms by MailMunch

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-9614

    Constant Contact Forms by MailMunch <= 2.1.2 - Reflected Cross-Site Scripting

    The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauth…

    mailmunch Constant Contact Forms by MailMunch Web / CMS
  • Medium 6.5
    CVE-2024-22137

    WordPress Constant Contact Forms by MailMunch Plugin <= 2.0.11 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch Constant Contact Forms by MailMunch allows Stored XSS.This issue affects Constant Contact Forms by MailMunch: from n/a through 2.0.11.

    mailmunch Constant Contact Forms by MailMunch
  • Medium 5.4
    CVE-2023-45647

    WordPress Constant Contact Forms by MailMunch Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in MailMunch Constant Contact Forms by MailMunch plugin <= 2.0.10 versions.

    mailmunch Constant Contact Forms by MailMunch