Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-44740 EUVD-2022-47672GHSA-hr35-x9rx-cc59

WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Published Nov 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Creative Mail plugin <= 1.5.4 on WordPress.

Affected products

VendorProductAffectedFixed
Constant Contact Creative Mail (WordPress plugin) <= 1.5.4 – ≤ 1.5.4 —

References