Vendor CVEs

Crmperks

All CVEs

42 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-60209	Crmperks Connector for Gravity Forms and Google Sheets	Cri	0.64	9.8	0.01	Oct 22, 2025	Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Object Injection.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.6.
CVE-2024-30498	Crmperks CRM Perks Forms	Cri	0.62	9.3	0.02	Mar 29, 2024	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.
CVE-2026-2599	WordPress Database For Contact Form 7\, Wpforms\, Elementor Forms	Cri	0.57	9.8	0.01	Mar 5, 2026	The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.7 via deserialization of untrusted input in the 'download_csv' function. This makes it possible for unauthenticated…
CVE-2024-30499	Crmperks CRM Perks Forms	Hig	0.55	8.5	0.01	Mar 29, 2024	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.
CVE-2023-31212	Crmperks Database For Contact Form 7\, Wpforms\, Elementor Forms	Hig	0.55	8.5	0.01	Oct 31, 2023	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms contact-form-entries allows SQL Injection.This issue affects Database for Contact Form 7, WPforms, Elementor…
CVE-2025-68590	Crmperks Integration for Contact Form 7 HubSpot	Hig	0.49	7.6	0.00	Dec 24, 2025	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot allows Blind SQL Injection.This issue affects Integration for Contact Form 7 HubSpot: from n/a through <= 1.4.2.
CVE-2025-24708	Crmperks WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms	Hig	0.46	7.1	0.00	Jan 27, 2025	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-dynamics-crm allows Reflected XSS.This issue affects WP Dynamics CRM for Contact…
CVE-2026-32527	Crmperks Integration For Constant Contact And Contact Form 7\, Wpforms\, Elementor\, Ninja	Med	0.42	6.5	0.00	Mar 25, 2026	Missing Authorization vulnerability in CRM Perks WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-insightly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Insightly for Contact Form 7, WPForms,…
CVE-2026-25430	Crmperks cf7-mailchimp	Med	0.42	6.5	0.00	Mar 25, 2026	Missing Authorization vulnerability in CRM Perks Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms cf7-mailchimp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integration for Mailchimp and Contact Form 7,…
CVE-2024-30446	Crmperks CRM Perks Forms	Med	0.42	6.5	0.00	Mar 29, 2024	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms allows Stored XSS.This issue affects CRM Perks Forms: from n/a through 1.1.4.
CVE-2024-1069	WordPress Contact Form Entries	Hig	0.40	7.2	0.01	Jan 31, 2024	The Contact Form Entries plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'view_page' function in versions up to, and including, 1.3.2. This makes it possible for authenticated attackers with administrator-level capabilities…
CVE-2023-51536	Crmperks CRM Perks Forms	Med	0.38	5.9	0.00	Feb 1, 2024	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms – WordPress Form Builder allows Stored XSS.This issue affects CRM Perks Forms – WordPress Form Builder: from n/a through 1.1.2.
CVE-2025-54682	Crmperks Connector for Gravity Forms and Google Sheets	Med	0.35	5.4	0.00	Aug 14, 2025	Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Cross Site Request Forgery.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.4.
CVE-2026-0825	WordPress Contact Form Entries	Med	0.34	5.3	0.00	Jan 28, 2026	The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the CSV export functionality in all versions up to, and including, 1.4.5. This makes it possible for unauthenticated attackers…
CVE-2026-24559	Crmperks Integration for Contact Form 7 HubSpot	Med	0.34	5.3	0.00	Jan 23, 2026	Insertion of Sensitive Information Into Sent Data vulnerability in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot allows Retrieve Embedded Sensitive Data.This issue affects Integration for Contact Form 7 HubSpot: from n/a through <= 1.4.3.
CVE-2025-67587	Crmperks WP Gravity Forms FreshDesk Plugin	Med	0.31	4.7	0.00	Dec 9, 2025	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Phishing.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through <= 1.3.5.
CVE-2025-60151	Crmperks WP Gravity Forms HubSpot	Med	0.31	4.7	0.00	Oct 22, 2025	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Phishing.This issue affects WP Gravity Forms HubSpot: from n/a through <= 1.2.5.
CVE-2025-54681	Crmperks Connector for Gravity Forms and Google Sheets	Med	0.31	4.7	0.00	Aug 14, 2025	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Phishing.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.4.
CVE-2025-30954	Crmperks WP Gravity Forms Constant Contact Plugin	Med	0.31	4.7	0.00	Jun 6, 2025	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Phishing.This issue affects WP Gravity Forms Constant Contact Plugin: from n/a through <= 1.1.0.
CVE-2025-30953	Crmperks WP Gravity Forms Salesforce	Med	0.31	4.7	0.00	Jun 6, 2025	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Phishing.This issue affects WP Gravity Forms Salesforce: from n/a through <= 1.4.7.
CVE-2025-47456	Crmperks WP Gravity Forms Zendesk	Med	0.31	4.7	0.00	May 7, 2025	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Zendesk gf-zendesk allows Phishing.This issue affects WP Gravity Forms Zendesk: from n/a through <= 1.1.2.
CVE-2025-47455	Crmperks Integration For Woocommerce And Quickbooks	Med	0.31	4.7	0.00	May 7, 2025	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and Salesforce woo-salesforce-plugin-crm-perks allows Phishing.This issue affects Integration for WooCommerce and Salesforce: from n/a through <= 1.7.5.
CVE-2025-47454	Crmperks WP Gravity Forms Dynamics CRM	Med	0.31	4.7	0.00	May 7, 2025	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Dynamics CRM gf-dynamics-crm allows Phishing.This issue affects WP Gravity Forms Dynamics CRM: from n/a through <= 1.1.4.
CVE-2023-31095	Crmperks Database For Contact Form 7\, Wpforms\, Elementor Forms	Med	0.31	4.7	0.00	Dec 29, 2023	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.8.
CVE-2023-37982	Crmperks Integration For Salesforce And Contact Form 7\, Wpforms\, Elementor\, Ninja Forms	Med	0.31	4.7	0.00	Dec 19, 2023	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Salesforce and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.3.3.
CVE-2023-38481	Crmperks Integration For Woocommerce And Zoho CRM\, Books\, Invoice\, Inventory\, Bigin	Med	0.31	4.7	0.00	Dec 19, 2023	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin.This issue affects Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin: from n/a before 1.3.7.
CVE-2023-38478	Crmperks Integration For Woocommerce And Quickbooks	Med	0.31	4.7	0.00	Dec 19, 2023	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and QuickBooks.This issue affects Integration for WooCommerce and QuickBooks: from n/a through 1.2.3.
CVE-2023-47779	Crmperks Integration For Constant Contact And Contact Form 7\, Wpforms\, Elementor\, Ninja	Med	0.31	4.7	0.00	Dec 7, 2023	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks. Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a…
CVE-2023-2836	WordPress CRM Perks Forms	Med	0.29	4.4	0.01	May 31, 2023	The CRM Perks Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
CVE-2025-67468	Crmperks Integration For Salesforce And Contact Form 7\, Wpforms\, Elementor\, Ninja Forms	Med	0.28	4.3	0.00	Dec 9, 2025	Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms cf7-salesforce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integration for Salesforce and…
CVE-2025-39600	Crmperks Integration For Woocommerce And Quickbooks	Med	0.28	4.3	0.00	Apr 16, 2025	Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for WooCommerce and QuickBooks wp-woocommerce-quickbooks allows Cross Site Request Forgery.This issue affects Integration for WooCommerce and QuickBooks: from n/a through <= 1.3.1.
CVE-2025-30863	Crmperks Integration For Constant Contact And Contact Form 7\, Wpforms\, Elementor\, Ninja	Med	0.28	4.3	0.00	Mar 27, 2025	Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms integration-for-contact-form-7-and-google-sheets allows Cross Site Request Forgery.This issue affects Integration for Google Sheets and…
CVE-2024-35632	Crmperks Integration For Constant Contact And Contact Form 7\, Wpforms\, Elementor\, Ninja	Med	0.28	4.3	0.00	Jun 3, 2024	Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks. Integration for Contact Form 7 and Constant Contact.This issue affects Integration for Contact Form 7 and Constant Contact: from n/a through 1.1.5.
CVE-2024-34817	Crmperks Integration For Constant Contact And Contact Form 7\, Wpforms\, Elementor\, Ninja	Med	0.28	4.3	0.00	May 14, 2024	Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.0.
CVE-2025-60180	Crmperks WP Gravity Forms Salesforce		0.00	—	0.00	Dec 18, 2025	Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue affects WP Gravity Forms Salesforce: from n/a through <= 1.5.1.
CVE-2025-60178	Crmperks WP Gravity Forms HubSpot		0.00	—	0.00	Dec 18, 2025	Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Object Injection.This issue affects WP Gravity Forms HubSpot: from n/a through <= 1.2.6.
CVE-2025-60174	Crmperks WP Gravity Forms Constant Contact Plugin		0.00	—	0.00	Dec 18, 2025	Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Object Injection.This issue affects WP Gravity Forms Constant Contact Plugin: from n/a through <= 1.1.2.
CVE-2025-60090	Crmperks WP Gravity Forms Insightly		0.00	—	0.00	Dec 18, 2025	Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Insightly gf-insightly allows Object Injection.This issue affects WP Gravity Forms Insightly: from n/a through <= 1.1.6.
CVE-2025-60089	Crmperks WP Gravity Forms FreshDesk Plugin		0.00	—	0.00	Dec 18, 2025	Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Object Injection.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through <= 1.3.5.
CVE-2024-37463	Crmperks CRM Perks Forms		0.00	—	0.00	Nov 1, 2024	Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5.
CVE-2024-7484	WordPress CRM Perks Forms		0.00	—	0.01	Aug 6, 2024	The CRM Perks Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'handle_uploaded_files' function in versions up to, and including, 1.1.3. This makes it possible for authenticated attackers with administrator-level…
CVE-2023-2326	WordPress Gsheetconnector Gravityforms Pro		0.00	—	0.00	Jun 27, 2023	The Gravity Forms Google Sheet Connector WordPress plugin before 1.3.5, gsheetconnector-gravityforms-pro WordPress plugin through 1.3.5 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an…

CVE-2025-60209CriOct 22, 2025
Crmperks
Connector for Gravity Forms and Google Sheets
risk 0.64cvss 9.8epss 0.01
Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Object Injection.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.6.
CVE-2024-30498CriMar 29, 2024
Crmperks
CRM Perks Forms
risk 0.62cvss 9.3epss 0.02
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.
CVE-2026-2599CriMar 5, 2026
WordPress
Database For Contact Form 7\, Wpforms\, Elementor Forms
risk 0.57cvss 9.8epss 0.01
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.7 via deserialization of untrusted input in the 'download_csv' function. This makes it possible for unauthenticated…
CVE-2024-30499HigMar 29, 2024
Crmperks
CRM Perks Forms
risk 0.55cvss 8.5epss 0.01
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.
CVE-2023-31212HigOct 31, 2023
Crmperks
Database For Contact Form 7\, Wpforms\, Elementor Forms
risk 0.55cvss 8.5epss 0.01
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms contact-form-entries allows SQL Injection.This issue affects Database for Contact Form 7, WPforms, Elementor…
CVE-2025-68590HigDec 24, 2025
Crmperks
Integration for Contact Form 7 HubSpot
risk 0.49cvss 7.6epss 0.00
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot allows Blind SQL Injection.This issue affects Integration for Contact Form 7 HubSpot: from n/a through <= 1.4.2.
CVE-2025-24708HigJan 27, 2025
Crmperks
WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
risk 0.46cvss 7.1epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-dynamics-crm allows Reflected XSS.This issue affects WP Dynamics CRM for Contact…
CVE-2026-32527MedMar 25, 2026
Crmperks
Integration For Constant Contact And Contact Form 7\, Wpforms\, Elementor\, Ninja
risk 0.42cvss 6.5epss 0.00
Missing Authorization vulnerability in CRM Perks WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-insightly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Insightly for Contact Form 7, WPForms,…
CVE-2026-25430MedMar 25, 2026
Crmperks
cf7-mailchimp
risk 0.42cvss 6.5epss 0.00
Missing Authorization vulnerability in CRM Perks Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms cf7-mailchimp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integration for Mailchimp and Contact Form 7,…
CVE-2024-30446MedMar 29, 2024
Crmperks
CRM Perks Forms
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms allows Stored XSS.This issue affects CRM Perks Forms: from n/a through 1.1.4.
CVE-2024-1069HigJan 31, 2024
WordPress
Contact Form Entries
risk 0.40cvss 7.2epss 0.01
The Contact Form Entries plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'view_page' function in versions up to, and including, 1.3.2. This makes it possible for authenticated attackers with administrator-level capabilities…
CVE-2023-51536MedFeb 1, 2024
Crmperks
CRM Perks Forms
risk 0.38cvss 5.9epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms – WordPress Form Builder allows Stored XSS.This issue affects CRM Perks Forms – WordPress Form Builder: from n/a through 1.1.2.
CVE-2025-54682MedAug 14, 2025
Crmperks
Connector for Gravity Forms and Google Sheets
risk 0.35cvss 5.4epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Cross Site Request Forgery.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.4.
CVE-2026-0825MedJan 28, 2026
WordPress
Contact Form Entries
risk 0.34cvss 5.3epss 0.00
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the CSV export functionality in all versions up to, and including, 1.4.5. This makes it possible for unauthenticated attackers…
CVE-2026-24559MedJan 23, 2026
Crmperks
Integration for Contact Form 7 HubSpot
risk 0.34cvss 5.3epss 0.00
Insertion of Sensitive Information Into Sent Data vulnerability in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot allows Retrieve Embedded Sensitive Data.This issue affects Integration for Contact Form 7 HubSpot: from n/a through <= 1.4.3.
CVE-2025-67587MedDec 9, 2025
Crmperks
WP Gravity Forms FreshDesk Plugin
risk 0.31cvss 4.7epss 0.00
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Phishing.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through <= 1.3.5.
CVE-2025-60151MedOct 22, 2025
Crmperks
WP Gravity Forms HubSpot
risk 0.31cvss 4.7epss 0.00
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Phishing.This issue affects WP Gravity Forms HubSpot: from n/a through <= 1.2.5.
CVE-2025-54681MedAug 14, 2025
Crmperks
Connector for Gravity Forms and Google Sheets
risk 0.31cvss 4.7epss 0.00
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Phishing.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.4.
CVE-2025-30954MedJun 6, 2025
Crmperks
WP Gravity Forms Constant Contact Plugin
risk 0.31cvss 4.7epss 0.00
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Phishing.This issue affects WP Gravity Forms Constant Contact Plugin: from n/a through <= 1.1.0.
CVE-2025-30953MedJun 6, 2025
Crmperks
WP Gravity Forms Salesforce
risk 0.31cvss 4.7epss 0.00
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Phishing.This issue affects WP Gravity Forms Salesforce: from n/a through <= 1.4.7.
CVE-2025-47456MedMay 7, 2025
Crmperks
WP Gravity Forms Zendesk
risk 0.31cvss 4.7epss 0.00
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Zendesk gf-zendesk allows Phishing.This issue affects WP Gravity Forms Zendesk: from n/a through <= 1.1.2.
CVE-2025-47455MedMay 7, 2025
Crmperks
Integration For Woocommerce And Quickbooks
risk 0.31cvss 4.7epss 0.00
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and Salesforce woo-salesforce-plugin-crm-perks allows Phishing.This issue affects Integration for WooCommerce and Salesforce: from n/a through <= 1.7.5.
CVE-2025-47454MedMay 7, 2025
Crmperks
WP Gravity Forms Dynamics CRM
risk 0.31cvss 4.7epss 0.00
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Dynamics CRM gf-dynamics-crm allows Phishing.This issue affects WP Gravity Forms Dynamics CRM: from n/a through <= 1.1.4.
CVE-2023-31095MedDec 29, 2023
Crmperks
Database For Contact Form 7\, Wpforms\, Elementor Forms
risk 0.31cvss 4.7epss 0.00
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.8.
CVE-2023-37982MedDec 19, 2023
Crmperks
Integration For Salesforce And Contact Form 7\, Wpforms\, Elementor\, Ninja Forms
risk 0.31cvss 4.7epss 0.00
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Salesforce and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.3.3.
CVE-2023-38481MedDec 19, 2023
Crmperks
Integration For Woocommerce And Zoho CRM\, Books\, Invoice\, Inventory\, Bigin
risk 0.31cvss 4.7epss 0.00
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin.This issue affects Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin: from n/a before 1.3.7.
CVE-2023-38478MedDec 19, 2023
Crmperks
Integration For Woocommerce And Quickbooks
risk 0.31cvss 4.7epss 0.00
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and QuickBooks.This issue affects Integration for WooCommerce and QuickBooks: from n/a through 1.2.3.
CVE-2023-47779MedDec 7, 2023
Crmperks
Integration For Constant Contact And Contact Form 7\, Wpforms\, Elementor\, Ninja
risk 0.31cvss 4.7epss 0.00
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks. Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a…
CVE-2023-2836MedMay 31, 2023
WordPress
CRM Perks Forms
risk 0.29cvss 4.4epss 0.01
The CRM Perks Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
CVE-2025-67468MedDec 9, 2025
Crmperks
Integration For Salesforce And Contact Form 7\, Wpforms\, Elementor\, Ninja Forms
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms cf7-salesforce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integration for Salesforce and…
CVE-2025-39600MedApr 16, 2025
Crmperks
Integration For Woocommerce And Quickbooks
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for WooCommerce and QuickBooks wp-woocommerce-quickbooks allows Cross Site Request Forgery.This issue affects Integration for WooCommerce and QuickBooks: from n/a through <= 1.3.1.
CVE-2025-30863MedMar 27, 2025
Crmperks
Integration For Constant Contact And Contact Form 7\, Wpforms\, Elementor\, Ninja
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms integration-for-contact-form-7-and-google-sheets allows Cross Site Request Forgery.This issue affects Integration for Google Sheets and…
CVE-2024-35632MedJun 3, 2024
Crmperks
Integration For Constant Contact And Contact Form 7\, Wpforms\, Elementor\, Ninja
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks. Integration for Contact Form 7 and Constant Contact.This issue affects Integration for Contact Form 7 and Constant Contact: from n/a through 1.1.5.
CVE-2024-34817MedMay 14, 2024
Crmperks
Integration For Constant Contact And Contact Form 7\, Wpforms\, Elementor\, Ninja
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.0.
CVE-2025-60180Dec 18, 2025
Crmperks
WP Gravity Forms Salesforce
risk 0.00cvss —epss 0.00
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue affects WP Gravity Forms Salesforce: from n/a through <= 1.5.1.
CVE-2025-60178Dec 18, 2025
Crmperks
WP Gravity Forms HubSpot
risk 0.00cvss —epss 0.00
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Object Injection.This issue affects WP Gravity Forms HubSpot: from n/a through <= 1.2.6.
CVE-2025-60174Dec 18, 2025
Crmperks
WP Gravity Forms Constant Contact Plugin
risk 0.00cvss —epss 0.00
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Object Injection.This issue affects WP Gravity Forms Constant Contact Plugin: from n/a through <= 1.1.2.
CVE-2025-60090Dec 18, 2025
Crmperks
WP Gravity Forms Insightly
risk 0.00cvss —epss 0.00
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Insightly gf-insightly allows Object Injection.This issue affects WP Gravity Forms Insightly: from n/a through <= 1.1.6.
CVE-2025-60089Dec 18, 2025
Crmperks
WP Gravity Forms FreshDesk Plugin
risk 0.00cvss —epss 0.00
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Object Injection.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through <= 1.3.5.
CVE-2024-37463Nov 1, 2024
Crmperks
CRM Perks Forms
risk 0.00cvss —epss 0.00
Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5.
CVE-2024-7484Aug 6, 2024
WordPress
CRM Perks Forms
risk 0.00cvss —epss 0.01
The CRM Perks Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'handle_uploaded_files' function in versions up to, and including, 1.1.3. This makes it possible for authenticated attackers with administrator-level…
CVE-2023-2326Jun 27, 2023
WordPress
Gsheetconnector Gravityforms Pro
risk 0.00cvss —epss 0.00
The Gravity Forms Google Sheet Connector WordPress plugin before 1.3.5, gsheetconnector-gravityforms-pro WordPress plugin through 1.3.5 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an…