← WordPress Vulnerabilities
WordPress security by component

WP Gravity Forms Constant Contact Plugin

WP Gravity Forms Constant Contact Plugin is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 06, 2025; the highest CVE/CNA score is 4.7.

Plugin slug: gf-constant-contact

CVE-2025-30954: WP Gravity Forms Constant Contact Plugin: An open redirect

WP Gravity Forms Constant Contact Plugin is affected by an open redirect. Exposure depends on how the affected operation is made reachable by the site. A crafted link can redirect visitors from the trusted site to an attacker-controlled destination.

PublishedJun 06, 2025
Safe version guidanceSee mitigation notes
Safe version
Jun 06, 2025 CVE-2025-30954
WP Gravity Forms Constant Contact Plugin: An open redirect
WP Gravity Forms Constant Contact Plugin is affected by an open redirect. Exposure depends on how the affected operation is made reachable by the site. A crafted link can redirect visitors from the trusted site to an attacker-controlled destination.
See mitigation notes
CVE4.7
NVDPending