Description
Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Constant Contact | Creative Mail (WordPress plugin) | <= 1.5.4 – ≤ 1.5.4 | — |
Medium · 5.4
CVE-2022-40686
EUVD-2022-43957GHSA-jpfh-g4ff-w273
WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability
Published Nov 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack