Medium · 5.3 CVE-2025-67580 EUVD-2025-202047GHSA-52v3-p44c-8m9p

WordPress Constant Contact + WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability

Published Dec 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Constant Contact Product: Constant Contact + WooCommerce Category: Web / CMS

Description

Missing Authorization vulnerability in Constant Contact Constant Contact + WooCommerce constant-contact-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact + WooCommerce: from n/a through <= 2.4.1.

Affected products

Vendor	Product	Affected	Fixed
Constant Contact	Constant Contact + WooCommerce	≤ 2.4.1	—

References

https://patchstack.com/database/Wordpress/Plugin/constant-contact-woocommerce/vulnerability/wordpress-constant-contact-woocommerce-plugin-2-4-1-broken-access-control-vulnerability?_s_id=cve vdb-entry