Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2541▼ 392 respecto a la semana anterior
Críticas / altas1321▲ 41 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)99▼ 428 respecto a la semana anterior
15 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Crítica (9.8) | 0.56% | — | Integration FOR Contact Form 7 AND Constant ContactAI | 15/6/2026 | 17/6/2026 | Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact <= 1.1.6 versions. | |
| Modificada | Crítica (9.8) | 0.47% | — | Crmperks WP Gravity Forms Constant Contact Plugin | 18/12/2025 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Object Injection.This issue affects WP Gravity Forms Constant Contact Plugin: from n/a through <= 1.1.2. | |
| Aplazada | Media (5.3) | 0.21% | — | Constantcontact Constant Contact WoocommerceAI | 9/12/2025 | 17/6/2026 | Missing Authorization vulnerability in Constant Contact Constant Contact + WooCommerce constant-contact-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact + WooCommerce: from n/a through <= 2.4.1. | |
| Aplazada | Alta (8.8) | 0.33% | — | Webdevstudios Constant Contact FOR WordpressAI | 9/9/2025 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in webdevstudios Constant Contact for WordPress allows Object Injection. This issue affects Constant Contact for WordPress: from n/a through 4.1.1. | |
| Aplazada | Media (5.9) | 0.23% | — | Contact Form 7AICrmperks Integration FOR Contact Form 7 AND Constant ContactAIConstantcontact Constant ContactAI | 14/8/2025 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Integration for Contact Form 7 and Constant Contact cf7-constant-contact allows Stored XSS.This issue affects Integration for Contact Form 7 and Constant Contact: from n/a through <= 1.1.7. | |
| Aplazada | Media (4.7) | 0.31% | — | Crmperks GF Constant ContactAI | 6/6/2025 | 17/6/2026 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Phishing.This issue affects WP Gravity Forms Constant Contact Plugin: from n/a through <= 1.1.0. | |
| Aplazada | Alta (7.1) | 0.35% | — | Thehowarde Connect-contact-form-7-to-constant-contactAI | 13/12/2024 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thehowarde Connect Contact Form 7 to Constant Contact connect-contact-form-7-to-constant-contact-v3 allows Reflected XSS.This issue affects Connect Contact Form 7 to Constant Contact: from n/a through <= 1.4. | |
| Aplazada | Media (4.3) | 0.47% | — | Constantcontact Constant Contact FormsAI | 13/12/2024 | 17/6/2026 | Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3. | |
| Modificada | Media (6.1) | 0.52% | — | Mailmunch Constant Contact Forms | 13/11/2024 | 17/6/2026 | The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages… | |
| Aplazada | Media (4.3) | 0.17% | — | Crmperks Integration FOR Contact Form 7 AND Constant ContactAI | 3/6/2024 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks. Integration for Contact Form 7 and Constant Contact.This issue affects Integration for Contact Form 7 and Constant Contact: from n/a through 1.1.5. | |
| Modificada | Media (5.4) | 0.32% | — | Mailmunch Constant Contact Forms | 13/1/2024 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch Constant Contact Forms by MailMunch allows Stored XSS.This issue affects Constant Contact Forms by MailMunch: from n/a through 2.0.11. | |
| Modificada | Alta (7.5) | 0.44% | — | Constantcontact Constant Contact Forms | 8/1/2024 | 17/6/2026 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Constant Contact Constant Contact Forms.This issue affects Constant Contact Forms: from n/a through 2.4.2. | |
| Modificada | Media (6.1) | 0.38% | — | Crmperks Integration FOR Constant Contact AND Contact Form 7, Wpforms, Elementor, Ninja | 7/12/2023 | 17/6/2026 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks. Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.1.4. | |
| Modificada | Alta (8.8) | 0.21% | — | Mailmunch Constant Contact Forms | 16/10/2023 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in MailMunch Constant Contact Forms by MailMunch plugin <= 2.0.10 versions. | |
| Modificada | Media (4.8) | 0.65% | — | Constantcontact Constant Contact Forms | 18/3/2021 | 17/6/2026 | Unvalidated input and lack of output encoding in the Constant Contact Forms WordPress plugin, versions before 1.8.8, lead to multiple Stored Cross-Site Scripting vulnerabilities, which allowed high-privileged user (Editor+) to inject arbitrary JavaScript code or HTML in posts where the malicious form is embed. |