Medium · 4.3 CVE-2024-35632 EUVD-2024-35393GHSA-q9qq-x7ff-m4g5

WordPress Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability

Published Jun 3, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: CRM Perks Product: Integration for Contact Form 7 and Constant Contact

Description

Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks. Integration for Contact Form 7 and Constant Contact.This issue affects Integration for Contact Form 7 and Constant Contact: from n/a through 1.1.5.

Affected products

Vendor	Product	Affected	Fixed
CRM Perks.	Integration for Contact Form 7 and Constant Contact	≤ 1.1.5	—

References

https://patchstack.com/database/vulnerability/cf7-constant-contact/wordpress-integration-for-constant-contact-and-contact-form-7-wpforms-elementor-ninja-forms-plugin-1-1-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry