Skip to content
Noroxi

constantcontact records

5 published records for vendor constantcontact.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2022-40687
    35Monitor

    WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    constantcontact · creative mailNov 18, 2022

  • CVE-2022-44740
    35Monitor

    WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    HighCVSS 8.8No exploitEPSS 0%

    constantcontact · creative mailNov 18, 2022

  • CVE-2022-40686
    35Monitor

    WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    constantcontact · creative mailNov 18, 2022

  • CVE-2023-52208
    30Monitor

    WordPress Constant Contact Forms Plugin <= 2.4.2 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5No exploitEPSS 0%

    constantcontact · constant contact formsJan 8, 2024

  • CVE-2021-24134
    19Monitor

    Constant Contact Forms < 1.8.8 - Multiple Authenticated Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    constantcontact · constant contact formsMar 18, 2021