Read the docs

Zoho CRM

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Zoho CRM records in CISA KEV

No Zoho CRM vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2024-32890 CVE-2024-49297 · GHSA-2289-64mg-g86w

WordPress Zoho CRM Lead Magnet plugin <= 1.7.9.7 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in zohocrm Zoho CRM Lead Magnet zoho-crm-forms allows SQL Injection.This issue affects Zoho CRM Lead Magnet: from n/a thr…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00395 Published 2024-10-17 No fix listed CWE-89
TI-2026-19835 CVE-2026-24595 · GHSA-g87c-hvqg-w49c

WordPress Zoho CRM Lead Magnet plugin <= 1.8.1.9 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in zohocrm Zoho CRM Lead Magnet zoho-crm-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zoho CRM Lead Magnet: from n/a through <= 1.8.…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00295 Published 2026-01-23 No fix listed CWE-862
Open these records in search →