Connect Contact Form 7 to Constant Contact V3

Connect Contact Form 7 to Constant Contact V3 has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Connect Contact Form 7 to Constant Contact V3 has a vendor fix available, so running the current release closes it.

All of these findings were reported by thiennv. Connect Contact Form 7 to Constant Contact V3 is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Connect Contact Form 7 to Constant Contact V3 vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2024-54343

Connect Contact Form 7 to Constant Contact <= 1.4 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Connect Contact Form 7 to Constant Contact V3 banner
Latestv1.6.1

Connect Contact Form 7 to Constant Contact V3

thehowarde

Author

thehowarde

0.0(0)
0/100
Last Updated
2025-03-18 (2y ago)
Active Installs
10+
Downloads
2,878
Requires WP
4.8+
Requires PHP
7.0+
Tested up to
WP 6.7.7
Created
2019-10-27 (7y ago)
Requires Plugins
contact-form-7

Update March 2022. Users may need to update their API Secret and Application by visiting Constant Contact, and updating the settings page on this plugin. See https://v3.developer.constantcontact.com/api_guide/auth_update_apps.html for the release of the Constant Contact Authentication Update. This is an advanced Constant Contact to Contact Form 7 Connector. This plug-in will allow you to make a connection to Constant Contact’s API using OAUTH protocol. Retrieve all of your contact lists, and allow users to sign up for a single list, or multiple lists. This will update existing contacts in your Constant Contact list, or add new if they don’t exist. In addition to adding or updating E-Mail addresses of contacts in your list, this will also allow you to push basic contact fields, including: First Name Last Name Full Address Information including Country Some uses for this plugin would be to add an optional checkbox to a regular contact form where users can subscribe to a single or multiple CTCT lists. You could also include this with a product registration form, or pretty much make every form on your website a possibility for users to subscribe to your Constant Contact Lists. Additional Features Spam Prevention – Submitted e-mail addresses are subjected to a domain verification script, before they’re submitted to Constant Contact. This helps keep your contact list cleaner. Failsafe Methods- In the event that Constant Contact’s API is down, the plugin will store failed attempts and retry twice daily until they are successfully added. Error Reporting – If email addresses are submitted and rejected, an email is sent to the admin. Admin will be informed of users who may have unsubscribed previously and other constant contact error codes. Authentication Failure Notification – in the event that the authorization to constant contact is lost, the admin will get a notification to re-authorize the application. Add Opt-In Checkbox to WooCommerce Checkout Includes prevention of bot submissions Complete instructions can be found How to create an API Key and Token and here How to set up this plugin.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C