Skip to content
OpenAdvisories

Vendor

CRM Perks

76 known vulnerabilities.

Products

Database for Contact Form 7, WPforms, Elementor forms 10 CRM Perks Forms 5 CRM Perks Forms – WordPress Form Builder 4 Integration for Contact Form 7 HubSpot 4 WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms 3 Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms 3 Integration for Contact Form 7 and Constant Contact 3 Connector for Gravity Forms and Google Sheets 3 Integration for WooCommerce and QuickBooks 2 Integration for Contact Form 7 and Zoho CRM, Bigin 2 Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms 2 WP Gravity Forms Salesforce 2 Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms 2 WP Gravity Forms Zoho CRM and Bigin 2 WP Gravity Forms Constant Contact Plugin 2 WP Gravity Forms Keap/Infusionsoft 2 WP Gravity Forms HubSpot 2 Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms 2 Contact Form Entries 2 CRM Perks 2 WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms 2 WP Gravity Forms FreshDesk Plugin 2 Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms 1 Integration for Salesforce and Contact Form 7, WPForms, Elementor, Ninja Forms 1 WP Gravity Forms Dynamics CRM 1 Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms 1 WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms 1 Integration for Contact Form 7 and Salesforce 1 WP Gravity Forms Zendesk 1 Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms 1 CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout 1 Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin 1 WP Gravity Forms Insightly 1 Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms 1 Integration for WooCommerce and Salesforce 1
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.1
    CVE-2026-57421

    WordPress CRM Perks Forms plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms crm-perks-forms allows Reflected XSS.This issue affects CRM Perks Forms: from n/a through <= 1.1.7.

    CRM Perks CRM Perks Forms
  • High 7.1
    CVE-2026-57708

    WordPress Contact Form Entries plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Contact Form Entries contact-form-entries allows Reflected XSS.This issue affects Contact Form Entries: from n/a through <= 1.5.2.

    CRM Perks Contact Form Entries
  • High 8.1
    CVE-2026-9843

    Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value

    The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the view_page function in all versions up to, and including, 1.5.1. This makes it possible for …

    CRM Perks Database for Contact Form 7, WPforms, Elementor forms Web / CMS
  • High 7.2
    CVE-2026-2568

    WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting

    The WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission data in all versions up to, and including, 1.1.5 due to insufficient input sanitization and…

    CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms Web / CMS
  • High 7.6
    CVE-2025-68590

    WordPress Integration for Contact Form 7 HubSpot plugin <= 1.4.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot allows Blind SQL Injection.This issue affects Integration for Contact Form 7 HubSpot: from n/a t…

    CRM Perks Integration for Contact Form 7 HubSpot
  • High 7.1
    CVE-2025-39558

    WordPress CRM Perks plugin <= 1.1.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks support-x allows Reflected XSS.This issue affects CRM Perks: from n/a through <= 1.1.7.

    CRM Perks CRM Perks
  • High 7.1
    CVE-2025-24558

    WordPress CRM Perks plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks support-x allows Reflected XSS.This issue affects CRM Perks: from n/a through <= 1.1.5.

    CRM Perks CRM Perks
  • High 7.1
    CVE-2025-24708

    WordPress WP Dynamics CRM plugin <= 1.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-dynamics-crm allows Reflected XSS.This issue affects WP Dyna…

    CRM Perks WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
  • High 7.2
    CVE-2024-7484

    CRM Perks Forms <= 1.1.3 - Authenticated (Administrator+) Arbitrary File Upload

    The CRM Perks Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'handle_uploaded_files' function in versions up to, and including, 1.1.3. This makes it possible for authenticated attackers with admin…

    CRM Perks CRM Perks Forms – WordPress Form Builder Web / CMS
  • High 7.2
    CVE-2024-3715

    Database for Contact Form 7, WPforms, Elementor forms <= 1.3.8 - Unauthenticated Stored Cross-Site Scripting

    The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.8 due to insufficient input sanitization and output escaping. This makes it possible for unau…

    CRM Perks Database for Contact Form 7, WPforms, Elementor forms Web / CMS
  • High 8.5
    CVE-2024-30499

    WordPress CRM Perks Forms plugin <= 1.1.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.

    CRM Perks CRM Perks Forms
  • High 7.2
    CVE-2024-1069

    Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload

    The Contact Form Entries plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'view_page' function in versions up to, and including, 1.3.2. This makes it possible for authenticated attackers with administrato…

    CRM Perks Database for Contact Form 7, WPforms, Elementor forms Web / CMS
  • High 8.5
    CVE-2023-31212

    WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms contact-form-entries allows SQL Injection.This issue affects Database for Contact Form 7, WPf…

    CRM Perks Database for Contact Form 7, WPforms, Elementor forms