Vulnerabilities

TI-2023-02368 CVE-2023-2527 · GHSA-739g-jmq6-crj9

Integration for Contact Form 7 and Zoho CRM, Bigin < 1.2.4 - Admin+ SQLi

MEDIUM 57

The Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin before 1.2.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high pr…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0044 Published 2023-06-19 Fixed in 1.2.4 CWE-79

TI-2023-11221 CVE-2023-25976 · GHSA-pgv2-996q-246f

Cross-site request forgery in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin <= 1.2.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-05-26 No fix listed CWE-352

Vulnerabilities

Filters

Integration for Contact Form 7 and Zoho CRM, Bigin < 1.2.4 - Admin+ SQLi

Cross-site request forgery in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin