Is Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms safe?

Every recorded flaw

• Jun 15, 2026Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact <= 1.1.6 versions.CVE-2026-49106 · affects up to 1.1.6 · reported by PatchstackCritical 9.8
• Aug 14, 2025Integration for Contact Form 7 and Constant Contact: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2025-54684 · affects up to 1.1.7 · reported by PatchstackMedium 5.9
• Jun 3, 2024Integration for Contact Form 7 and Constant Contact: Cross-Site Request Forgery (CSRF)CVE-2024-35632 · affects up to 1.1.5 · reported by PatchstackMedium 4.3
• Dec 7, 2023Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms: URL Redirection to Untrusted Site ('Open Redirect')CVE-2023-47779 · affects up to 1.1.4 · reported by PatchstackMedium 4.7

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.