Medium · 4.3 CVE-2024-34817 EUVD-2024-35082GHSA-r938-r8hx-g8cx

WordPress Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability

Published May 10, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: CRM Perks Product: Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms

Description

Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.0.

Affected products

Vendor	Product	Affected	Fixed
CRM Perks	Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms	≤ 1.2.0	—

References

https://patchstack.com/database/vulnerability/integration-for-contact-form-7-and-pipedrive/wordpress-integration-for-pipedrive-and-contact-form-7-wpforms-elementor-ninja-forms-plugin-1-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry