CRM Perks Forms vulnerabilities

3 known vulnerabilities in CRM Perks Forms from Crmperks. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  CRM Perks Forms: Missing Authorization

  CVE-2024-37463Nov 1, 2024CRM Perks

  Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5.

• 7.2 High severity

  CRM Perks Forms – WordPress Form Builder: Unrestricted Upload of File with Dangerous Type

  CVE-2024-7484Aug 6, 2024Crmperks

  The CRM Perks Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'handle_uploaded_files' function in versions up to, and including, 1.1.3. This makes it possible for authenticated attackers with admini

• 10.0 Critical severity

  CRM Perks Forms: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-30498Mar 29, 2024CRM PerksEPSS 2.25%

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.