{"id":"CVE-2023-31095","aliases":["EUVD-2023-35424","GHSA-mj8x-x54q-8r6p"],"status":"published","title":"WordPress Integration for Contact Form 7 HubSpot Plugin \u003c= 1.2.8 is vulnerable to Open Redirection","description":"URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.8.","severity":{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00362,"percentile":0.30328,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-601"],"published":"2023-12-29T09:50:01Z","modified":"2026-06-17T05:56:16Z","products":[{"vendor":"crm perks","product":"integration for hubspot and contact form 7, wpforms, elementor, ninja forms"},{"vendor":"crmperks","product":"database_for_contact_form_7\\,_wpforms\\,_elementor_forms"}],"references":[{"url":"https://patchstack.com/database/vulnerability/cf7-hubspot/wordpress-integration-for-contact-form-7-hubspot-plugin-1-2-8-open-redirection-vulnerability?_s_id=cve","tags":["vdb-entry","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31095"},{"url":"https://github.com/advisories/GHSA-mj8x-x54q-8r6p"}],"sources":{"cve":[{"id":"CVE-2023-31095","title":"WordPress Integration for Contact Form 7 HubSpot Plugin \u003c= 1.2.8 is vulnerable to Open Redirection","description":"URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.8.","status":"published","published":"2023-12-29T09:50:01.256Z","modified":"2026-04-28T16:08:20.875Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:35:27.430605Z"}],"euvd":[{"id":"EUVD-2023-35424","description":"URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.8.","status":"published","published":"2023-12-29T09:50:01Z","modified":"2026-04-28T16:08:20Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:24:09.272661Z"}],"ghsa":[{"id":"GHSA-mj8x-x54q-8r6p","title":"URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for...","description":"URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.8.","status":"published","published":"2023-12-29T12:30:41Z","modified":"2026-04-28T21:34:39Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T15:07:45.281583Z"}],"nvd":[{"id":"CVE-2023-31095","description":"URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.8.","status":"published","published":"2023-12-29T10:15:09.26Z","modified":"2026-06-17T05:56:16.963Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:08:59.830468Z"}]}}