The CRM Perks Connector for Gravity Forms and Google Sheets plugin up to version 1.2.4 contains an Open Redirect vulnerability (CVE-2025-54681). This vulnerability enables attackers to redirect users to untrusted sites via crafted URLs, which can be used in phishing campaigns. The CVSS 3.1 base score is 4.7, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and limited confidentiality impact. No patch or mitigation details are currently provided.

Successful exploitation could lead to users being redirected to malicious websites, increasing the risk of phishing attacks. There is no direct impact on data integrity or availability reported. The vulnerability primarily affects user trust and could facilitate social engineering attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should be cautious of unexpected redirects originating from this plugin and consider disabling or limiting its use if possible.