Skip to content
OpenAdvisories
Medium · 4.7 CVE-2025-62981 EUVD-2025-35964GHSA-rxr2-m2mh-wpx6

WordPress WP Gravity Forms Zoho CRM and Bigin plugin <= 1.2.8 - Open Redirection vulnerability

Published Oct 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Phishing.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through <= 1.2.8.

Affected products

VendorProductAffectedFixed
CRM Perks WP Gravity Forms Zoho CRM and Bigin ≤ 1.2.8 —

References