What’s Vulnerable › Vulnerabilities

CVE-2023-47779: WordPress Integration for Contact Form 7 and Constant Contact Plugin <= 1.1.4 is vulnerable to Open Redirection

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-07 · updated 2026-06-17
• Weakness: CWE-601

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks. Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.1.4.

Affected products

• CRM Perks Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms: before 1.1.5 — fixed in 1.1.5

How to fix

Upgrade to a fixed version: CRM Perks Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms 1.1.5. Check the vendor advisory for mitigations.

References

• https://patchstack.com/database/vulnerability/cf7-constant-contact/wordpress-integration-for-contact-form-7-and-constant-contact-plugin-1-1-4-open-redirection-vulnerability?_s_id=cve
• https://patchstack.com/database/vulnerability/cf7-constant-contact/wordpress-integration-for-contact-form-7-and-constant-contact-plugin-1-1-4-open-redirection-vulnerability?_s_id=cve

Get alerted when CVE-2023-47779 or the next vulnerability affects your stack