Constantcontact
Constantcontact Creative Mail: vulnerabilidades y CVE
Constantcontact Creative Mail tiene 6 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses3
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-3430 | Alta (8.6) | 0.41% | — | 6 ago 2026 | The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL injection when the abandoned cart email is managed by… |
| CVE-2026-65547 | Alta (8.5) | 0.36% | — | 6 ago 2026 | Subscriber SQL Injection in Creative Mail <= 1.6.9 versions. |
| CVE-2026-3985 | Alta (7.5) | 0.51% | — | 20 may 2026 | The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection via the 'checkout_uuid' parameter in all versions up to, and including, 1.6.9. This is due to… |
| CVE-2022-44740 | Alta (8.8) | 0.31% | — | 18 nov 2022 | Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Creative Mail plugin <= 1.5.4 on WordPress. |
| CVE-2022-40687 | Alta (8.8) | 0.76% | — | 18 nov 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress. |
| CVE-2022-40686 | Alta (8.8) | 0.29% | — | 18 nov 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.