CRM Perks Vulnerabilities and Affected Products
Vulnerabilities associated with CRM Perks Forms – WordPress Form Builder.
Products
Clear product- CRM Perks Forms5 vulnerabilities
- Integration for Contact Form 7 HubSpot4 vulnerabilities
- Connector for Gravity Forms and Google Sheets3 vulnerabilities
- Contact Form Entries2 vulnerabilities
- CRM Perks2 vulnerabilities
- CRM Perks Forms – WordPress Form Builder2 vulnerabilities
- Integration for Contact Form 7 and Constant Contact2 vulnerabilities
- Integration for Contact Form 7 and Zoho CRM, Bigin2 vulnerabilities
- Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms2 vulnerabilities
- Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms2 vulnerabilities
- Integration for WooCommerce and QuickBooks2 vulnerabilities
- WP Gravity Forms Constant Contact Plugin2 vulnerabilities
- WP Gravity Forms FreshDesk Plugin2 vulnerabilities
- WP Gravity Forms HubSpot2 vulnerabilities
- WP Gravity Forms Keap/Infusionsoft2 vulnerabilities
- WP Gravity Forms Salesforce2 vulnerabilities
- WP Gravity Forms Zoho CRM and Bigin2 vulnerabilities
- WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms2 vulnerabilities
- WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms2 vulnerabilities
- Database for Contact Form 7, WPforms, Elementor forms1 vulnerability
- Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms1 vulnerability
- Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms1 vulnerability
- Integration for Contact Form 7 and Salesforce1 vulnerability
- Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms1 vulnerability
- Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-51536MEDIUM | WordPress CRM Perks Forms Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms – WordPress Form Builder allows Stored XSS.This issue affects CRM Perks Forms – WordPress Form Builder: from n/a through 1.1.2. CWE-79Feb 1, 2024 | CVSS5.9v3.1 | EPSS0.336% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-38467MEDIUM | WordPress CRM Perks Forms Plugin <= 1.1.0 is vulnerable to Reflected Cross Site Scripting (XSS) vulnerabilityReflected Cross-Site Scripting (XSS) vulnerability in CRM Perks Forms – WordPress Form Builder <= 1.1.0 ver. | CVSS6.1v3.1 | EPSS0.81% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |