CRM Perks vulnerabilities and threats

45 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.7	EPSS 0.2%	CVE-2025-67587CRM Perks WP Gravity Forms FreshDesk Plugin · Open Redirect Medium4.7EPSS 0.2%2025-12-09CVE Database V5CVE-2025-67587 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Phishing.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through <= 1.3.5. EPSS 0.2%Vulnerability	CVE Database V5	2025-12-09
Medium	4.3	EPSS 0.2%	CVE-2025-67468Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-12-09CVE Database V5CVE-2025-67468 Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms cf7-salesforce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms: from n/a through <= 1.4.6. EPSS 0.2%Vulnerability CRM Perks CWE-862	CVE Database V5	2025-12-09
Critical	9.8	EPSS 0.5%	CVE-2025-58636CRM Perks WP Gravity Forms Keap/Infusionsoft · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2025-11-06CVE Database V5CVE-2025-58636 Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Keap/Infusionsoft gf-infusionsoft allows Object Injection.This issue affects WP Gravity Forms Keap/Infusionsoft: from n/a through <= 1.2.3. EPSS 0.5%Vulnerability	CVE Database V5	2025-11-06
Medium	4.7	EPSS 0.2%	CVE-2025-62981WP Gravity Forms Zoho CRM and Bigin · Open Redirect Medium4.7EPSS 0.2%2025-10-27CVE Database V5CVE-2025-62981 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Phishing.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through <= 1.2.8. EPSS 0.2%Vulnerability CRM Perks	CVE Database V5	2025-10-27
Critical	9.8	EPSS 0.6%	CVE-2025-60209Connector for Gravity Forms and Google Sheets (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2025-10-22CVE Database V5CVE-2025-60209 Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Object Injection.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.6. EPSS 0.6%Vulnerability CRM Perks	CVE Database V5	2025-10-22
Medium	4.7	EPSS 0.3%	CVE-2025-60151CRM Perks WP Gravity Forms HubSpot · Open Redirect Medium4.7EPSS 0.3%2025-10-22CVE Database V5CVE-2025-60151 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Phishing.This issue affects WP Gravity Forms HubSpot: from n/a through <= 1.2.5. EPSS 0.3%Vulnerability	CVE Database V5	2025-10-22
Medium	4.7	EPSS 0.3%	CVE-2025-58006CRM Perks WP Gravity Forms Keap/Infusionsoft · Open Redirect Medium4.7EPSS 0.3%2025-09-22CVE Database V5CVE-2025-58006 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Keap/Infusionsoft gf-infusionsoft allows Phishing.This issue affects WP Gravity Forms Keap/Infusionsoft: from n/a through <= 1.2.6. EPSS 0.3%Vulnerability	CVE Database V5	2025-09-22
Medium	5.9	EPSS 0.2%	CVE-2025-54684Integration for Contact Form 7 and Constant Contact (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.2%2025-08-14CVE Database V5CVE-2025-54684 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Integration for Contact Form 7 and Constant Contact cf7-constant-contact allows Stored XSS.This issue affects Integration for Contact Form 7 and Constant Contact: from n/a through <= 1.1.7. EPSS 0.2%Vulnerability CRM Perks	CVE Database V5	2025-08-14
Medium	5.4	EPSS 0.1%	CVE-2025-54682Connector for Gravity Forms and Google Sheets (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.1%2025-08-14CVE Database V5CVE-2025-54682 Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Cross Site Request Forgery.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.4. EPSS 0.1%Vulnerability CRM Perks	CVE Database V5	2025-08-14
Medium	4.7	EPSS 0.3%	CVE-2025-54681Connector for Gravity Forms and Google Sheets (WordPress plugin) · Open Redirect Medium4.7EPSS 0.3%2025-08-14CVE Database V5CVE-2025-54681 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Phishing.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.4. EPSS 0.3%Vulnerability CRM Perks	CVE Database V5	2025-08-14
Critical	9.8	EPSS 0.6%	CVE-2025-49330Integration for Contact Form 7 and Zoho CRM, Bigin (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2025-06-17CVE Database V5CVE-2025-49330 Deserialization of Untrusted Data vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin cf7-zoho allows Object Injection.This issue affects Integration for Contact Form 7 and Zoho CRM, Bigin: from n/a through <= 1.3.0. EPSS 0.6%Vulnerability CRM Perks	CVE Database V5	2025-06-17
Medium	4.7	EPSS 0.3%	CVE-2025-30953CRM Perks WP Gravity Forms Salesforce · Open Redirect Medium4.7EPSS 0.3%2025-06-06CVE Database V5CVE-2025-30953 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Phishing.This issue affects WP Gravity Forms Salesforce: from n/a through <= 1.4.7. EPSS 0.3%Vulnerability	CVE Database V5	2025-06-06
Medium	4.7	EPSS 0.3%	CVE-2025-30954CRM Perks WP Gravity Forms Constant Contact Plugin · Open Redirect Medium4.7EPSS 0.3%2025-06-06CVE Database V5CVE-2025-30954 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Phishing.This issue affects WP Gravity Forms Constant Contact Plugin: from n/a through <= 1.1.0. EPSS 0.3%Vulnerability	CVE Database V5	2025-06-06
Medium	4.3	EPSS 0.2%	CVE-2025-39600Integration for WooCommerce and QuickBooks (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-04-16CVE Database V5CVE-2025-39600 Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for WooCommerce and QuickBooks wp-woocommerce-quickbooks allows Cross Site Request Forgery.This issue affects Integration for WooCommerce and QuickBooks: from n/a through <= 1.3.1. EPSS 0.2%Vulnerability CRM Perks	CVE Database V5	2025-04-16
Medium	4.3	EPSS 0.2%	CVE-2025-32269CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-04-04CVE Database V5CVE-2025-32269 Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-zendesk allows Cross Site Request Forgery.This issue affects WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: from n/a through <= 1.1.3. EPSS 0.2%Vulnerability	CVE Database V5	2025-04-04
Medium	4.3	EPSS 0.2%	CVE-2025-30863Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-03-27CVE Database V5CVE-2025-30863 Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms integration-for-contact-form-7-and-google-sheets allows Cross Site Request Forgery.This issue affects Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through <= 1.0.9. EPSS 0.2%Vulnerability CRM Perks	CVE Database V5	2025-03-27
High	7.1	EPSS 0.3%	CVE-2025-24708WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms · Cross-site Scripting High7.1EPSS 0.3%2025-01-27CVE Database V5CVE-2025-24708 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-dynamics-crm allows Reflected XSS.This issue affects WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: from n/a through <= 1.1.6. EPSS 0.3%Vulnerability CRM Perks	CVE Database V5	2025-01-27
Medium	5.3	EPSS 0.5%	CVE-2024-37463CRM Perks Forms (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.5%2024-11-01CVE Database V5CVE-2024-37463 Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5. EPSS 0.5%Vulnerability CWE-862	CVE Database V5	2024-11-01
Medium	4.3	EPSS 0.2%	CVE-2024-35632Integration for Contact Form 7 and Constant Contact (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-06-03CVE Database V5CVE-2024-35632 Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks. Integration for Contact Form 7 and Constant Contact.This issue affects Integration for Contact Form 7 and Constant Contact: from n/a through 1.1.5. EPSS 0.2%Vulnerability CRM Perks CWE-352	CVE Database V5	2024-06-03
Medium	4.3	EPSS 0.2%	CVE-2024-34755Integration for Contact Form 7 and Salesforce (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-05-17CVE Database V5CVE-2024-34755 Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 and Salesforce.This issue affects Integration for Contact Form 7 and Salesforce: from n/a through 1.3.9. EPSS 0.2%Vulnerability CRM Perks CWE-352	CVE Database V5	2024-05-17

Page 2 of 3