Crmperks vulnerabilities
We track 12 vulnerabilities in Crmperks products across 6 products. 12 are rated high or critical, and none are known to be exploited. The most recent was published on June 20, 2026.
Latest Crmperks vulnerabilities
- 8.1 High severity
Database for Contact Form 7, WPforms…: Improper Limitation of a Pathname to a Restricted Directory
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the view_page function in all versions up to, and including, 1.5.1. This makes it possible for u
- 9.8 Critical severity
Database for Contact Form 7, WPforms…: Deserialization of Untrusted Data
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.7 via deserialization of untrusted input in the 'download_csv' function. This makes it possible for u
- 7.2 High severity
WP Zendesk for Contact Form 7, WPForms…: Improper Neutralization of Input During Web Page Generation
The WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission data in all versions up to, and including, 1.1.5 due to insufficient input sanitization and
- 9.8 Critical severity
Database for Contact Form 7, WPforms…: Deserialization of Untrusted Data
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.3 via deserialization of untrusted input in the get_lead_detail function. This makes it possible for
- 9.8 Critical severity
Integration for Google Sheets and Contact Form…: Deserialization of Untrusted Data
The Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.1 via deserialization of untrusted input within the verify_field_val() fu
- 9.8 Critical severity
Integration for Pipedrive and Contact Form 7…: Deserialization of Untrusted Data
The Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.3 via deserialization of untrusted input within the verify_field_val() functi
- 9.8 Critical severity
CRM Perks Forms: Missing Authorization
Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5.
- 7.2 High severity
CRM Perks Forms – WordPress Form Builder: Unrestricted Upload of File with Dangerous Type
The CRM Perks Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'handle_uploaded_files' function in versions up to, and including, 1.1.3. This makes it possible for authenticated attackers with admini
- 7.2 High severity
Database for Contact Form 7, WPforms…: Improper Neutralization of Input During Web Page Generation
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.8 due to insufficient input sanitization and output escaping. This makes it possible for unaut
- 10.0 Critical severity
CRM Perks Forms: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.
- 7.2 High severity
Database for Contact Form 7, WPforms…: Unrestricted Upload of File with Dangerous Type
The Contact Form Entries plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'view_page' function in versions up to, and including, 1.3.2. This makes it possible for authenticated attackers with administrator
- 9.8 Critical severity
Database for Contact Form 7, WPforms…: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms contact-form-entries allows SQL Injection.This issue affects Database for Contact Form 7, WPfo