Vulnerabilidades en CRM Perks

59 resultados
Análisis Vexday

Com 56 CVEs catalogadas, o ecossistema de plugins do CRM Perks apresenta 17 falhas de severidade crítica, o que representa uma concentração relevante de riscos de alta gravidade. Nenhuma CVE está atualmente sob exploração ativa confirmada pelo CISA KEV, situando o vendor abaixo da média geral do catálogo, embora esse dado não elimine o risco potencial dado que 4 vulnerabilidades já possuem Prova de Conceito pública disponível. O tipo de falha mais recorrente é CWE-502 (desserialização de dados não confiáveis), uma classe de vulnerabilidade historicamente explorada para execução remota de código e que merece atenção prioritária nos processos de hardening. A CVE mais crítica no momento, CVE-2024-30498, apresenta EPSS de 0,0227, e o surgimento de 7 novas CVEs nos últimos 90 dias indica um ritmo de descoberta ativo que justifica monitoramento contínuo.

CVE-2025-60174CRITICALWordPress WP Gravity Forms Constant Contact plugin plugin <= 1.1.2 - Deserialization of untrusted data vulnerabilityEPSS 0.5%CVE-2025-60090CRITICALWordPress WP Gravity Forms Insightly plugin <= 1.1.6 - Deserialization of untrusted data vulnerabilityEPSS 0.5%CVE-2025-60091CRITICALWordPress WP Gravity Forms Zoho CRM and Bigin plugin <= 1.2.9 - Deserialization of untrusted data vulnerabilityEPSS 0.5%CVE-2025-58636CRITICALWordPress WP Gravity Forms Keap/Infusionsoft Plugin <= 1.2.3 - Deserialization of untrusted data VulnerabilityEPSS 0.5%CVE-2024-37463MEDIUMWordPress CRM Perks Forms plugin <= 1.1.5 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2023-33311MEDIUMWordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-47779MEDIUMWordPress Integration for Contact Form 7 and Constant Contact Plugin <= 1.1.4 is vulnerable to Open RedirectionEPSS 0.4%CVE-2023-31095MEDIUMWordPress Integration for Contact Form 7 HubSpot Plugin <= 1.2.8 is vulnerable to Open RedirectionEPSS 0.4%CVE-2026-25430MEDIUMWordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.2.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-51536MEDIUMWordPress CRM Perks Forms Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2024-30446MEDIUMWordPress CRM Perks Forms plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-68590HIGHWordPress Integration for Contact Form 7 HubSpot plugin <= 1.4.2 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-30954MEDIUMWordPress WP Gravity Forms Constant Contact Plugin <= 1.1.0 - Open Redirection VulnerabilityEPSS 0.3%CVE-2025-47456MEDIUMWordPress WP Gravity Forms Zendesk plugin <= 1.1.2 - Open Redirection VulnerabilityEPSS 0.3%CVE-2025-47455MEDIUMWordPress Integration for WooCommerce and Salesforce plugin <= 1.7.5 - Open Redirection VulnerabilityEPSS 0.3%CVE-2025-47454MEDIUMWordPress WP Gravity Forms Dynamics CRM plugin <= 1.1.4 - Open Redirection VulnerabilityEPSS 0.3%CVE-2025-30953MEDIUMWordPress WP Gravity Forms Salesforce plugin <= 1.4.7 - Open Redirection VulnerabilityEPSS 0.3%CVE-2026-32527MEDIUMWordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-58006MEDIUMWordPress WP Gravity Forms Keap/Infusionsoft plugin <= 1.2.6 - Open Redirection vulnerabilityEPSS 0.3%CVE-2026-24559MEDIUMWordPress Integration for Contact Form 7 HubSpot plugin <= 1.4.3 - Sensitive Data Exposure vulnerabilityEPSS 0.3%