The vulnerability CVE-2025-47456 affects the WP Gravity Forms Zendesk plugin by CRM Perks, specifically versions up to and including 1.1.2. It is an open redirect issue where crafted URLs can redirect users to untrusted external websites. This behavior can be exploited to conduct phishing attacks by misleading users into visiting malicious sites. The CVSS 3.1 vector indicates the attack requires no privileges but does require user interaction, with a scope change and limited confidentiality impact. No patch or vendor advisory is currently provided.

The primary impact is the potential for phishing attacks due to the open redirect vulnerability. Attackers can lure users into clicking malicious URLs that appear to originate from a trusted source but redirect to harmful sites. There is no direct impact on system integrity or availability reported. Confidentiality impact is limited as per the CVSS score.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when clicking URLs generated by the affected plugin and consider implementing additional URL validation or filtering controls if possible. Monitor official CRM Perks communications for updates regarding patches or mitigations.