Read the docs

CRM Perks

Records80All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical24CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

CRM Perks records in CISA KEV

No CRM Perks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Crm Perks Forms 8 records MEDIUM Database For Contact Form 7, Wpforms, Elementor Forms 4 records HIGH Contact Form Entries 2 records HIGH Integration For Contact Form 7 And Zoho Crm, Bigin 2 records MEDIUM Contact Form Entries - Contact Form 7 Wpforms And More 1 record LOW Integration For Constant Contact And Contact Form 7, Wpforms, Elementor, Ninja 1 record LOW Integration For Salesforce And Contact Form 7, Wpforms, Elementor, Ninja Forms 1 record LOW Integration For Woocommerce And Quickbooks 1 record LOW

Records

2 records in Contact Form Entries · all components

TI-2021-07358 CVE-2021-25080 · GHSA-5pmg-vf2j-3wp3

Contact Form Entries < 1.1.7 - Unauthenticated Stored Cross-Site Scripting

Priority HIGH 68

The Contact Form Entries WordPress plugin before 1.1.7 does not validate, sanitise and escape the IP address retrieved via headers such as CLIENT-IP and X-FORWARDED-FOR, allowing unauthenticated attackers to perform Cros…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.842 Published 2022-01-24 Fixed in 1.1.7 CWE-79
TI-2021-07357 CVE-2021-25079 · GHSA-m3hv-p839-hwv6

Contact Form Entries < 1.2.4 - Reflected Cross-Site Scripting

Priority LOW 37

The Contact Form Entries WordPress plugin before 1.2.4 does not sanitise and escape various parameters, such as form_id, status, end_date, order, orderby and search before outputting them back in the admin page

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0679 Published 2022-01-24 Fixed in 1.2.4 CWE-79
Open these records in search →