Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-67468 EUVD-2025-202136GHSA-hgg9-7rw7-5rhw

WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.4.6 - Broken Access Control vulnerability

Published Dec 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: CRM Perks Product: Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms

Description

Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms cf7-salesforce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms: from n/a through <= 1.4.6.

Affected products

VendorProductAffectedFixed
CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms ≤ 1.4.6 —

References