CRM Perks

Records80All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical24CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

CRM Perks records in CISA KEV

No CRM Perks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Crm Perks Forms 8 records MEDIUM Database For Contact Form 7, Wpforms, Elementor Forms 4 records HIGH Contact Form Entries 2 records HIGH Integration For Contact Form 7 And Zoho Crm, Bigin 2 records MEDIUM Contact Form Entries - Contact Form 7 Wpforms And More 1 record LOW Integration For Constant Contact And Contact Form 7, Wpforms, Elementor, Ninja 1 record LOW Integration For Salesforce And Contact Form 7, Wpforms, Elementor, Ninja Forms 1 record LOW Integration For Woocommerce And Quickbooks 1 record LOW

Records

4 records in Database For Contact Form 7, Wpforms, Elementor Forms · all components

TI-2022-03317 CVE-2022-3604 · GHSA-fpx6-qj6w-4m83

Contact Form Entries < 1.3.0 - CSV Injection

HIGH 69

The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could lead to CSV injection.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00428 Published 2024-01-16 Fixed in 1.3.0 CWE-1236

TI-2023-14918 CVE-2023-31212 · GHSA-3x9m-qxj4-gff3

WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to SQL Injection

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms contact-form-entries allows SQL Injection.This issue a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-10-31 No fix listed CWE-89

TI-2024-00990 CVE-2024-1069 · GHSA-whch-9pr2-9fvq

Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload

LOW 36

The Contact Form Entries plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'view_page' function in versions up to, and including, 1.3.2.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01219 Published 2024-01-31 No fix listed CWE-434

TI-2023-14821 CVE-2023-31095 · GHSA-mj8x-x54q-8r6p

WordPress Integration for Contact Form 7 HubSpot Plugin <= 1.2.8 is vulnerable to Open Redirection

LOW 27

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for HubSpot and Contact Form 7, WP…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00362 Published 2023-12-29 No fix listed CWE-601

Open these records in search →