CRM Perks vulnerabilities

We track 20 vulnerabilities in CRM Perks products across 16 products. 20 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.

20vulnerabilities

13critical

7high

0exploited

9.0average CVSS score

Latest CRM Perks vulnerabilities

7.1 High severity
Contact Form Entries: Improper Neutralization of Input During Web Page Generation
CVE-2026-57708Jul 13, 2026CRM Perks
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Contact Form Entries contact-form-entries allows Reflected XSS.This issue affects Contact Form Entries: from n/a through <= 1.5.2.
7.1 High severity
CRM Perks Forms: Improper Neutralization of Input During Web Page Generation
CVE-2026-57421Jul 13, 2026CRM Perks
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms crm-perks-forms allows Reflected XSS.This issue affects CRM Perks Forms: from n/a through <= 1.1.7.
9.8 Critical severity
Integration for Keap/infusionsoft and Contact…: Deserialization of Untrusted Data
CVE-2026-49104Jun 15, 2026CRM Perks
Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.2.1 versions.
7.6 High severity
Integration for Contact Form 7 HubSpot: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-68590Dec 24, 2025CRM Perks
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot allows Blind SQL Injection.This issue affects Integration for Contact Form 7 HubSpot: from n/a th
9.8 Critical severity
WP Gravity Forms Salesforce: Deserialization of Untrusted Data
CVE-2025-60180Dec 18, 2025CRM Perks
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue affects WP Gravity Forms Salesforce: from n/a through <= 1.5.1.
9.8 Critical severity
WP Gravity Forms HubSpot: Deserialization of Untrusted Data
CVE-2025-60178Dec 18, 2025CRM Perks
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Object Injection.This issue affects WP Gravity Forms HubSpot: from n/a through <= 1.2.6.
9.8 Critical severity
WP Gravity Forms Constant Contact Plugin: Deserialization of Untrusted Data
CVE-2025-60174Dec 18, 2025CRM Perks
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Object Injection.This issue affects WP Gravity Forms Constant Contact Plugin: from n/a through <= 1.1.2.
9.8 Critical severity
WP Gravity Forms Zoho CRM and Bigin: Deserialization of Untrusted Data
CVE-2025-60091Dec 18, 2025CRM Perks
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Object Injection.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through <= 1.2.9.
9.8 Critical severity
WP Gravity Forms Insightly: Deserialization of Untrusted Data
CVE-2025-60090Dec 18, 2025CRM Perks
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Insightly gf-insightly allows Object Injection.This issue affects WP Gravity Forms Insightly: from n/a through <= 1.1.6.
9.8 Critical severity
WP Gravity Forms FreshDesk Plugin: Deserialization of Untrusted Data
CVE-2025-60089Dec 18, 2025CRM Perks
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Object Injection.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through <= 1.3.5.
9.8 Critical severity
WP Gravity Forms Keap/Infusionsoft: Deserialization of Untrusted Data
CVE-2025-58636Nov 6, 2025CRM Perks
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Keap/Infusionsoft gf-infusionsoft allows Object Injection.This issue affects WP Gravity Forms Keap/Infusionsoft: from n/a through <= 1.2.3.
9.8 Critical severity
Connector for Gravity Forms and Google Sheets: Deserialization of Untrusted Data
CVE-2025-60209Oct 22, 2025CRM Perks
Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Object Injection.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.6.
9.8 Critical severity
Integration for Contact Form 7 and Zoho CRM…: Deserialization of Untrusted Data
CVE-2025-49330Jun 17, 2025CRM Perks
Deserialization of Untrusted Data vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin cf7-zoho allows Object Injection.This issue affects Integration for Contact Form 7 and Zoho CRM, Bigin: from n/a through <= 1.3.0.
7.1 High severity
CRM Perks: Improper Neutralization of Input During Web Page Generation
CVE-2025-39558Apr 17, 2025CRM Perks
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks support-x allows Reflected XSS.This issue affects CRM Perks: from n/a through <= 1.1.7.
7.1 High severity
CRM Perks: Improper Neutralization of Input During Web Page Generation
CVE-2025-24558Feb 14, 2025CRM Perks
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks support-x allows Reflected XSS.This issue affects CRM Perks: from n/a through <= 1.1.5.
7.1 High severity
WP Dynamics CRM for Contact Form 7, WPForms…: Improper Neutralization of Input During Web Page Generation
CVE-2025-24708Jan 27, 2025CRM Perks
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-dynamics-crm allows Reflected XSS.This issue affects WP Dynam
9.8 Critical severity
CRM Perks Forms: Missing Authorization
CVE-2024-37463Nov 1, 2024CRM Perks
Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5.
8.8 High severity
CRM Perks Forms: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-30499Mar 29, 2024CRM Perks
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.
10.0 Critical severity
CRM Perks Forms: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-30498Mar 29, 2024CRM PerksEPSS 2.25%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.
9.8 Critical severity
Database for Contact Form 7, WPforms…: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-31212Oct 31, 2023CRM Perks
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms contact-form-entries allows SQL Injection.This issue affects Database for Contact Form 7, WPfo