Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-49330 EUVD-2025-28295GHSA-f99v-mhf6-q3rr

WordPress Integration for Contact Form 7 and Zoho CRM, Bigin plugin <= 1.3.0 - PHP Object Injection Vulnerability

Published Jun 17, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: CRM Perks Product: Integration for Contact Form 7 and Zoho CRM, Bigin

Description

Deserialization of Untrusted Data vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin cf7-zoho allows Object Injection.This issue affects Integration for Contact Form 7 and Zoho CRM, Bigin: from n/a through <= 1.3.0.

Affected products

VendorProductAffectedFixed
CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin ≤ 1.3.0 —

References