Skip to content
OpenAdvisories
Medium · 4.7 CVE-2025-67587 EUVD-2025-202066GHSA-hxv7-g5hh-vf32

WordPress WP Gravity Forms FreshDesk Plugin plugin <= 1.3.5 - Open Redirection vulnerability

Published Dec 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Phishing.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through <= 1.3.5.

Affected products

VendorProductAffectedFixed
CRM Perks WP Gravity Forms FreshDesk Plugin ≤ 1.3.5 —

References