Skip to content
OpenAdvisories
Medium · 4.7 CVE-2023-31095 EUVD-2023-35424GHSA-mj8x-x54q-8r6p

WordPress Integration for Contact Form 7 HubSpot Plugin <= 1.2.8 is vulnerable to Open Redirection

Published Dec 29, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: CRM Perks Product: Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.8.

Affected products

VendorProductAffectedFixed
CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms ≤ 1.2.8 —

References