Crmperks vulnerabilities

Products

• Database For Contact Form 7, Wpforms, Elementor Forms 13
• Crm Perks Forms 8
• Database For Contact Form 7\, Wpforms\, Elementor Forms 4
• Wp Zendesk For Contact Form 7, Wpforms, Elementor, Formidable And Ninja Forms 3
• Contact Form Entries 2
• Crm Perks Forms – Wordpress Form Builder 2
• Integration For Constant Contact And Contact Form 7\, Wpforms\, Elementor\, Ninja 2
• Integration For Contact Form 7 And Zoho Crm\, Bigin 2
• Integration For Google Sheets And Contact Form 7, Wpforms, Elementor, Ninja Forms 2
• Integration For Pipedrive And Contact Form 7, Wpforms, Elementor, Ninja Forms 2

Newest

• crmperks database for contact form 7, wpforms, elementor forms Database for Contact Form 7, WPforms, Elementor forms < 1.5.5 - Authenticated SQL Injection via id Parameter CVE-2026-14872 6.8 MediumAugust 4, 2026
• crmperks database for contact form 7, wpforms, elementor forms Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_id CVE-2026-14870 7.1 HighJuly 28, 2026
• crmperks database for contact form 7, wpforms, elementor forms Database for Contact Form 7, WPforms, Elementor forms < 1.5.2 - Unauthenticated PHP Object Injection via Entry File Field CVE-2026-12081 5.0 MediumJuly 13, 2026
• crmperks database for contact form 7, wpforms, elementor forms Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value' CVE-2026-9145 6.5 MediumJuly 2, 2026
• crmperks database for contact form 7, wpforms, elementor forms Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value CVE-2026-9843 8.1 HighJune 20, 2026
• crm perks wp zendesk for contact form 7, wpforms, elementor, formidable and ninja forms WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability CVE-2026-49105 Public exploit 9.8 CriticalJune 15, 2026
• crmperks database for contact form 7, wpforms, elementor forms Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode CVE-2026-3831 4.3 MediumApril 1, 2026
• crmperks database for contact form 7, wpforms, elementor forms Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv' CVE-2026-2599 9.8 CriticalMarch 5, 2026
• crmperks wp zendesk for contact form 7, wpforms, elementor, formidable and ninja forms WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting CVE-2026-2568 7.2 HighMarch 3, 2026
• crmperks database for contact form 7, wpforms, elementor forms Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export CVE-2026-0825 5.3 MediumJanuary 28, 2026
• crm perks wp gravity forms salesforce WordPress WP Gravity Forms Salesforce plugin <= 1.5.1 - PHP Object Injection vulnerability CVE-2025-60180 9.8 CriticalDecember 18, 2025
• crm perks wp gravity forms hubspot WordPress WP Gravity Forms HubSpot plugin <= 1.2.6 - Deserialization of untrusted data vulnerability CVE-2025-60178 9.8 CriticalDecember 18, 2025
• crm perks wp gravity forms constant contact plugin WordPress WP Gravity Forms Constant Contact plugin plugin <= 1.1.2 - Deserialization of untrusted data vulnerability CVE-2025-60174 9.8 CriticalDecember 18, 2025
• crm perks wp gravity forms zoho crm and bigin WordPress WP Gravity Forms Zoho CRM and Bigin plugin <= 1.2.9 - Deserialization of untrusted data vulnerability CVE-2025-60091 9.8 CriticalDecember 18, 2025
• crm perks wp gravity forms insightly WordPress WP Gravity Forms Insightly plugin <= 1.1.6 - Deserialization of untrusted data vulnerability CVE-2025-60090 9.8 CriticalDecember 18, 2025
• crm perks wp gravity forms freshdesk plugin WordPress WP Gravity Forms FreshDesk plugin plugin <= 1.3.5 - Deserialization of untrusted data vulnerability CVE-2025-60089 9.8 CriticalDecember 18, 2025
• crmperks database for contact form 7, wpforms, elementor forms Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion CVE-2025-7384 Public exploit 9.8 CriticalAugust 13, 2025
• crmperks integration for google sheets and contact form 7, wpforms, elementor, ninja forms Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val Function CVE-2025-7697 9.8 CriticalJuly 19, 2025
• crmperks integration for pipedrive and contact form 7, wpforms, elementor, ninja forms Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.2.3 - Unauthenticated PHP Object Injection via verify_field_val Function CVE-2025-7696 9.8 CriticalJuly 19, 2025
• crm perks integration for salesforce and contact form 7, wpforms, elementor, formidable, ninja forms Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.4.4 - Unauthenticated Full Path Disclosure CVE-2025-4659 5.3 MediumMay 30, 2025
• crm perks wp zendesk for contact form 7, wpforms, elementor, formidable and ninja forms WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms Plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2025-32269 4.3 MediumApril 4, 2025
• crm perks integration for google sheets and contact form 7, wpforms, elementor, ninja forms WordPress Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-30863 4.3 MediumMarch 27, 2025
• crmperks crm perks – wordpress helpdesk integration – zendesk, freshdesk, helpscout CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12443 6.4 MediumDecember 16, 2024
• crm perks forms, crmperks crm perks forms +1 more WordPress CRM Perks Forms plugin <= 1.1.5 - Broken Access Control vulnerability CVE-2024-37463 5.3 MediumNovember 1, 2024
• crmperks crm perks forms, crm perks forms – wordpress form builder, crmperks crm perks forms – wordpress form builder +2 more CRM Perks Forms <= 1.1.3 - Authenticated (Administrator+) Arbitrary File Upload CVE-2024-7484 7.2 HighAugust 6, 2024
• crm perks integration for contact form 7 hubspot, crmperks integration for constant contact and contact form 7\, wpforms\, elementor\, ninja +1 more WordPress Integration for HubSpot and Contact Form 7 plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-34756 4.3 MediumMay 17, 2024
• crm perks integration for pipedrive and contact form 7, wpforms, elementor, ninja forms WordPress Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-34817 4.3 MediumMay 10, 2024
• crmperks database for contact form 7, wpforms, elementor forms Database for Contact Form 7, WPforms, Elementor forms <= 1.3.8 - Unauthenticated Stored Cross-Site Scripting CVE-2024-3715 7.2 HighMay 2, 2024
• crm perks forms, crmperks crm perks forms +1 more WordPress CRM Perks Forms plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability CVE-2024-30446 6.5 MediumMarch 29, 2024
• crm perks forms, crmperks crm perks forms +1 more WordPress CRM Perks Forms plugin <= 1.1.4 - SQL Injection vulnerability CVE-2024-30499 8.5 HighMarch 29, 2024
• crm perks forms, crmperks crm perks forms +1 more WordPress CRM Perks Forms plugin <= 1.1.4 - Unauthenticated SQL Injection vulnerability CVE-2024-30498 9.3 CriticalMarch 29, 2024
• crmperks database for contact form 7, wpforms, elementor forms Database for Contact Form 7, WPforms, Elementor forms <= 1.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode CVE-2024-2030 6.4 MediumMarch 13, 2024
• crm perks forms – wordpress form builder, crmperks crm perks forms +1 more WordPress CRM Perks Forms Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-51536 5.9 MediumFebruary 1, 2024
• crmperks database for contact form 7, wpforms, elementor forms, database for contact form 7\, wpforms\, elementor forms +1 more Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload CVE-2024-1069 7.2 HighJanuary 31, 2024
• unknown contact form entries, crmperks database for contact form 7\, wpforms\, elementor forms +1 more Contact Form Entries < 1.3.0 - CSV Injection CVE-2022-3604 7.8 HighJanuary 16, 2024
• crm perks integration for hubspot and contact form 7, wpforms, elementor, ninja forms, crmperks database for contact form 7\, wpforms\, elementor forms +1 more WordPress Integration for Contact Form 7 HubSpot Plugin <= 1.2.8 is vulnerable to Open Redirection CVE-2023-31095 4.7 MediumDecember 29, 2023
• crm perks integration for salesforce and contact form 7, wpforms, elementor, ninja forms, crmperks integration for salesforce and contact form 7\, wpforms\, elementor\, ninja forms +1 more WordPress Integration for Contact Form 7 and Salesforce Plugin <= 1.3.3 is vulnerable to Open Redirection CVE-2023-37982 4.7 MediumDecember 19, 2023
• crm perks integration for woocommerce and quickbooks WordPress Integration for WooCommerce and QuickBooks Plugin <= 1.2.3 is vulnerable to Open Redirection CVE-2023-38478 4.7 MediumDecember 19, 2023
• crm perks integration for woocommerce and zoho crm, books, invoice, inventory, bigin, crmperks integration for woocommerce and zoho crm\, books\, invoice\, inventory\, bigin +1 more WordPress Integration for WooCommerce and Zoho CRM Plugin < 1.3.7 is vulnerable to Open Redirection CVE-2023-38481 4.7 MediumDecember 19, 2023
• crm perks integration for constant contact and contact form 7, wpforms, elementor, ninja forms, crmperks integration for constant contact and contact form 7\, wpforms\, elementor\, ninja +1 more WordPress Integration for Contact Form 7 and Constant Contact Plugin <= 1.1.4 is vulnerable to Open Redirection CVE-2023-47779 4.7 MediumDecember 7, 2023
• crm perks database for contact form 7, wpforms, elementor forms, crmperks database for contact form 7\, wpforms\, elementor forms +1 more WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to SQL Injection CVE-2023-31212 8.5 HighOctober 31, 2023
• crm perks integration for contact form 7 and zoho crm, bigin, crmperks integration for contact form 7 and zoho crm\, bigin +1 more Integration for Contact Form 7 and Zoho CRM, Bigin < 1.2.4 - Admin+ SQLi CVE-2023-2527 4.8 MediumJune 19, 2023
• crmperks crm perks forms, crm perks forms – wordpress form builder, crmperks crm perks forms – wordpress form builder +2 more CRM Perks Forms <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-2836 4.4 MediumMay 31, 2023
• crm perks contact form entries, crmperks contact form entries - contact form 7 wpforms and more +1 more WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-33311 6.5 MediumMay 28, 2023
• crm perks integration for contact form 7 and zoho crm, bigin, crmperks integration for contact form 7 and zoho crm\, bigin +1 more WordPress Integration for Contact Form 7 and Zoho CRM, Bigin Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-25976 4.3 MediumMay 26, 2023
• crm perks forms – wordpress form builder, crmperks crm perks forms +1 more WordPress CRM Perks Forms Plugin <= 1.1.0 is vulnerable to Reflected Cross Site Scripting (XSS) vulnerability CVE-2022-38467 6.1 MediumJanuary 14, 2023
• crmperks contact form entries, unknown contact form entries – contact form 7, wpforms and more +1 more Contact Form Entries < 1.1.7 - Unauthenticated Stored Cross-Site Scripting CVE-2021-25080 EPSS 84.2% 6.1 MediumJanuary 24, 2022
• crmperks contact form entries, unknown contact form entries – contact form 7, wpforms and more +1 more Contact Form Entries < 1.2.4 - Reflected Cross-Site Scripting CVE-2021-25079 6.1 MediumJanuary 24, 2022