CR
Vendor
Crmperks
42
CVEs
0
On KEV
0
New 30D
Products
DF9.8
Database for Contact Form 7, WPforms, Elementor forms
crmperks
12 CVEs0 on KEV0 new
CP10.0
Crm Perks Forms
Crmperks
8 CVEs0 on KEV0 new
CF6.1
Contact Form Entries
Crmperks
2 CVEs0 on KEV0 new
IF6.1
Integration For Constant Contact And Contact Form 7, Wpforms, Elementor, Ninja
Crmperks
2 CVEs0 on KEV0 new
IF8.8
Integration For Contact Form 7 And Zoho Crm, Bigin
Crmperks
2 CVEs0 on KEV0 new
CF5.4
Contact Form Entries - Contact Form 7 Wpforms And More
Crmperks
1 CVEs0 on KEV0 new
CP7.2
CRM Perks Forms – WordPress Form Builder
crmperks
1 CVEs0 on KEV0 new
CP6.4
CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout
crmperks
1 CVEs0 on KEV0 new
IF9.8
Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms
crmperks
1 CVEs0 on KEV0 new
IF9.8
Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms
crmperks
1 CVEs0 on KEV0 new
IF5.3
Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms
crmperks
1 CVEs0 on KEV0 new
IF6.1
Integration For Salesforce And Contact Form 7, Wpforms, Elementor, Ninja Forms
Crmperks
1 CVEs0 on KEV0 new
IF6.1
Integration For Woocommerce And Quickbooks
Crmperks
1 CVEs0 on KEV0 new
IF6.1
Integration For Woocommerce And Zoho Crm, Books, Invoice, Inventory, Bigin
Crmperks
1 CVEs0 on KEV0 new
WG9.8
WP Gravity Forms Constant Contact Plugin
Crmperks
1 CVEs0 on KEV0 new
WG9.8
WP Gravity Forms Freshdesk Plugin
Crmperks
1 CVEs0 on KEV0 new
WG9.8
WP Gravity Forms Hubspot
Crmperks
1 CVEs0 on KEV0 new
WG9.8
WP Gravity Forms Insightly
Crmperks
1 CVEs0 on KEV0 new
WG9.8
WP Gravity Forms Salesforce
Crmperks
1 CVEs0 on KEV0 new
WG9.8
WP Gravity Forms Zoho Crm And Bigin
Crmperks
1 CVEs0 on KEV0 new
WZ7.2
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
crmperks
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-9145 | DF Database for Contact Form 7, WPforms, Elementor forms crmperks | 6.5 | Jul 2 | Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value' |
| CVE-2026-9843 | DF Database for Contact Form 7, WPforms, Elementor forms crmperks | 8.1 | Jun 20 | Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value |
| CVE-2026-3831 | DF Database for Contact Form 7, WPforms, Elementor forms crmperks | 4.3 | Apr 1 | Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode |
| CVE-2026-2599 | DF Database for Contact Form 7, WPforms, Elementor forms crmperks | 9.8 | Mar 5 | Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv' |
| CVE-2026-2568 | WZ WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms crmperks | 7.2 | Mar 3 | WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2026-0825 | DF Database for Contact Form 7, WPforms, Elementor forms crmperks | 5.3 | Jan 28 | Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export |
| CVE-2025-60180 | WG WP Gravity Forms Salesforce Crmperks | 9.8 | Dec 18 | WordPress WP Gravity Forms Salesforce plugin <= 1.5.1 - PHP Object Injection vulnerability |
| CVE-2025-60178 | WG WP Gravity Forms Hubspot Crmperks | 9.8 | Dec 18 | WordPress WP Gravity Forms HubSpot plugin <= 1.2.6 - Deserialization of untrusted data vulnerability |
| CVE-2025-60174 | WG WP Gravity Forms Constant Contact Plugin Crmperks | 9.8 | Dec 18 | WordPress WP Gravity Forms Constant Contact plugin plugin <= 1.1.2 - Deserialization of untrusted data vulnerability |
| CVE-2025-60091 | WG WP Gravity Forms Zoho Crm And Bigin Crmperks | 9.8 | Dec 18 | WordPress WP Gravity Forms Zoho CRM and Bigin plugin <= 1.2.9 - Deserialization of untrusted data vulnerability |
| CVE-2025-60090 | WG WP Gravity Forms Insightly Crmperks | 9.8 | Dec 18 | WordPress WP Gravity Forms Insightly plugin <= 1.1.6 - Deserialization of untrusted data vulnerability |
| CVE-2025-60089 | WG WP Gravity Forms Freshdesk Plugin Crmperks | 9.8 | Dec 18 | WordPress WP Gravity Forms FreshDesk plugin plugin <= 1.3.5 - Deserialization of untrusted data vulnerability |
| CVE-2025-7384 | DF Database for Contact Form 7, WPforms, Elementor forms crmperks | 9.8 | Aug 13 | Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion |
| CVE-2025-7697 | IF Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms crmperks | 9.8 | Jul 19 | Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val Function |
| CVE-2025-7696 | IF Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms crmperks | 9.8 | Jul 19 | Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.2.3 - Unauthenticated PHP Object Injection via verify_field_val Function |
| CVE-2025-4659 | IF Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms crmperks | 5.3 | May 30 | Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.4.4 - Unauthenticated Full Path Disclosure |
| CVE-2024-12443 | CP CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout crmperks | 6.4 | Dec 16 | CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-37463 | CP Crm Perks Forms Crmperks | 9.8 | Nov 1 | WordPress CRM Perks Forms plugin <= 1.1.5 - Broken Access Control vulnerability |
| CVE-2024-7484 | CP CRM Perks Forms – WordPress Form Builder crmperks | 7.2 | Aug 6 | CRM Perks Forms <= 1.1.3 - Authenticated (Administrator+) Arbitrary File Upload |
| CVE-2024-34756 | IF Integration For Constant Contact And Contact Form 7\, Wpforms\, Elementor\, Ninja Crmperks | 4.3 | May 17 | WordPress Integration for HubSpot and Contact Form 7 plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-3715 | DF Database for Contact Form 7, WPforms, Elementor forms crmperks | 7.2 | May 2 | Database for Contact Form 7, WPforms, Elementor forms <= 1.3.8 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2024-30446 | CP Crm Perks Forms Crmperks | 5.4 | Mar 29 | WordPress CRM Perks Forms plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-30499 | CP Crm Perks Forms Crmperks | 8.8 | Mar 29 | WordPress CRM Perks Forms plugin <= 1.1.4 - SQL Injection vulnerability |
| CVE-2024-30498 | CP Crm Perks Forms Crmperks | 10.0 | Mar 29 | WordPress CRM Perks Forms plugin <= 1.1.4 - Unauthenticated SQL Injection vulnerability |
| CVE-2024-2030 | DF Database for Contact Form 7, WPforms, Elementor forms crmperks | 6.4 | Mar 13 | Database for Contact Form 7, WPforms, Elementor forms <= 1.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode |
| CVE-2023-51536 | CP Crm Perks Forms Crmperks | 4.8 | Feb 1 | WordPress CRM Perks Forms Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2024-1069 | DF Database for Contact Form 7, WPforms, Elementor forms crmperks | 7.2 | Jan 31 | Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload |
| CVE-2022-3604 | DF Database For Contact Form 7, Wpforms, Elementor Forms Crmperks | 7.8 | Jan 16 | Contact Form Entries < 1.3.0 - CSV Injection |
| CVE-2023-31095 | DF Database For Contact Form 7, Wpforms, Elementor Forms Crmperks | 6.1 | Dec 29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects… |
| CVE-2023-37982 | IF Integration For Salesforce And Contact Form 7, Wpforms, Elementor, Ninja Forms Crmperks | 6.1 | Dec 19 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects… |
| CVE-2023-38481 | IF Integration For Woocommerce And Zoho Crm, Books, Invoice, Inventory, Bigin Crmperks | 6.1 | Dec 19 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin.This issue affects… |
| CVE-2023-38478 | IF Integration For Woocommerce And Quickbooks Crmperks | 6.1 | Dec 19 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and QuickBooks.This issue affects Integration for WooCommerce and… |
| CVE-2023-47779 | IF Integration For Constant Contact And Contact Form 7, Wpforms, Elementor, Ninja Crmperks | 6.1 | Dec 7 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks |
| CVE-2023-31212 | DF Database For Contact Form 7, Wpforms, Elementor Forms Crmperks | 9.8 | Oct 31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms… |
| CVE-2023-2527 | IF Integration For Contact Form 7 And Zoho Crm, Bigin Crmperks | 4.8 | Jun 19 | The Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin before 1.2.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading… |
| CVE-2023-2836 | CP Crm Perks Forms Crmperks | 4.8 | May 31 | The CRM Perks Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in versions up to, and including, 1.1.1 due to insufficient input… |
| CVE-2023-33311 | CF Contact Form Entries - Contact Form 7 Wpforms And More Crmperks | 5.4 | May 28 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in CRM Perks Contact Form Entries plugin <= 1.3.0 versions |
| CVE-2023-25976 | IF Integration For Contact Form 7 And Zoho Crm, Bigin Crmperks | 8.8 | May 26 | Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin <= 1.2.2 versions |
| CVE-2022-38467 | CP Crm Perks Forms Crmperks | 6.1 | Jan 14 | Reflected Cross-Site Scripting (XSS) vulnerability in CRM Perks Forms – WordPress Form Builder <= 1.1.0 ver |
| CVE-2021-25080 | CF Contact Form Entries Crmperks | 6.1 | Jan 24 | The Contact Form Entries WordPress plugin before 1.1.7 does not validate, sanitise and escape the IP address retrieved via headers such as CLIENT-IP and X-FORWARDED-FOR, allowing… |
| CVE-2021-25079 | CF Contact Form Entries Crmperks | 6.1 | Jan 24 | The Contact Form Entries WordPress plugin before 1.2.4 does not sanitise and escape various parameters, such as form_id, status, end_date, order, orderby and search before… |
