{"id":"CVE-2024-34817","aliases":["EUVD-2024-35082","GHSA-r938-r8hx-g8cx"],"status":"published","title":"WordPress Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms plugin \u003c= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability","description":"Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.0.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00247,"percentile":0.16113,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2024-05-10T08:35:23Z","modified":"2026-06-17T07:34:07Z","products":[{"vendor":"crm perks","product":"integration for pipedrive and contact form 7, wpforms, elementor, ninja forms"},{"vendor":"crmperks","product":"integration for pipedrive and contact form 7, wpforms, elementor, ninja forms"}],"references":[{"url":"https://patchstack.com/database/vulnerability/integration-for-contact-form-7-and-pipedrive/wordpress-integration-for-pipedrive-and-contact-form-7-wpforms-elementor-ninja-forms-plugin-1-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve","tags":["vdb-entry","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34817"},{"url":"https://github.com/advisories/GHSA-r938-r8hx-g8cx"}],"sources":{"cve":[{"id":"CVE-2024-34817","title":"WordPress Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms plugin \u003c= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability","description":"Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.0.","status":"published","published":"2024-05-10T08:35:23.243Z","modified":"2026-04-28T16:09:51.258Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:34:23.193864Z"}],"euvd":[{"id":"EUVD-2024-35082","description":"Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.0.","status":"published","published":"2024-05-10T08:35:23Z","modified":"2026-04-28T16:09:51Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:06:04.085099Z"}],"ghsa":[{"id":"GHSA-r938-r8hx-g8cx","title":"Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Pipedrive and...","description":"Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.0.","status":"published","published":"2024-05-14T18:30:51Z","modified":"2026-04-28T21:35:11Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T15:07:47.318679Z"}],"nvd":[{"id":"CVE-2024-34817","description":"Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.0.","status":"published","published":"2024-05-14T15:39:34.63Z","modified":"2026-06-17T07:34:07.073Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:09:58.124007Z"}]}}