Known vulnerabilities in Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms

Send Contact Form 7, WPForms, Elementor, Ninja Forms, Contact Forms Entries data and many other contact form submissions to Constant Contact.

4Reported vulnerabilities

8.1Highest CVSS score

1.2.0Latest version

800+Active installs

What to do now

Update Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms to 1.1.7 or later. 4 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 5, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2026-49106	High 8.1	0.4%	1.1.6 and earlier	`1.1.7`	June 4, 2026
CVE-2023-47779	Medium 4.7	0.4%	1.1.4 and earlier	`1.1.5`	November 14, 2023
CVE-2025-54684	Medium 4.4	0.2%	1.1.7 and earlier	`1.1.8`	July 30, 2025
CVE-2024-35632	Medium 4.3	0.2%	1.1.5 and earlier	`1.1.6`	May 27, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.