# cve.now: CRM Perks

The newest entries naming CRM Perks as an affected vendor (up to 200), of 60 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-57708](https://cve.now/CVE-2026-57708.md): WordPress Contact Form Entries plugin \<= 1.5.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-57421](https://cve.now/CVE-2026-57421.md): WordPress CRM Perks Forms plugin \<= 1.1.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-49765](https://cve.now/CVE-2026-49765.md): WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin \<= 1.1.8 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-49763](https://cve.now/CVE-2026-49763.md): WordPress Integration for Contact Form 7 HubSpot plugin \<= 1.3.7 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-49109](https://cve.now/CVE-2026-49109.md): WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin \<= 1.4.3 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-49106](https://cve.now/CVE-2026-49106.md): WordPress Integration for Contact Form 7 and Constant Contact plugin \<= 1.1.6 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-49105](https://cve.now/CVE-2026-49105.md): WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin \<= 1.1.4 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-49104](https://cve.now/CVE-2026-49104.md): WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin \<= 1.2.1 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-49085](https://cve.now/CVE-2026-49085.md): WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin \<= 1.1.4 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-9691](https://cve.now/CVE-2026-9691.md): WordPress Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms plugin \<= 1.1.1 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-32527](https://cve.now/CVE-2026-32527.md): WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin \<= 1.1.5 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2026-25430](https://cve.now/CVE-2026-25430.md): WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin \<= 1.2.2 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2026-24559](https://cve.now/CVE-2026-24559.md): WordPress Integration for Contact Form 7 HubSpot plugin \<= 1.4.3 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- [CVE-2025-68590](https://cve.now/CVE-2025-68590.md): WordPress Integration for Contact Form 7 HubSpot plugin \<= 1.4.2 - SQL Injection vulnerability (CVSS 7.6)
- [CVE-2025-60180](https://cve.now/CVE-2025-60180.md): WordPress WP Gravity Forms Salesforce plugin \<= 1.5.1 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2025-60178](https://cve.now/CVE-2025-60178.md): WordPress WP Gravity Forms HubSpot plugin \<= 1.2.6 - Deserialization of untrusted data vulnerability (CVSS 9.8)
- [CVE-2025-60174](https://cve.now/CVE-2025-60174.md): WordPress WP Gravity Forms Constant Contact plugin plugin \<= 1.1.2 - Deserialization of untrusted data vulnerability (CVSS 9.8)
- [CVE-2025-60091](https://cve.now/CVE-2025-60091.md): WordPress WP Gravity Forms Zoho CRM and Bigin plugin \<= 1.2.9 - Deserialization of untrusted data vulnerability (CVSS 9.8)
- [CVE-2025-60090](https://cve.now/CVE-2025-60090.md): WordPress WP Gravity Forms Insightly plugin \<= 1.1.6 - Deserialization of untrusted data vulnerability (CVSS 9.8)
- [CVE-2025-60089](https://cve.now/CVE-2025-60089.md): WordPress WP Gravity Forms FreshDesk plugin plugin \<= 1.3.5 - Deserialization of untrusted data vulnerability (CVSS 9.8)
- [CVE-2025-67587](https://cve.now/CVE-2025-67587.md): WordPress WP Gravity Forms FreshDesk Plugin plugin \<= 1.3.5 - Open Redirection vulnerability (CVSS 4.7)
- [CVE-2025-67468](https://cve.now/CVE-2025-67468.md): WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin \<= 1.4.6 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2025-58636](https://cve.now/CVE-2025-58636.md): WordPress WP Gravity Forms Keap/Infusionsoft Plugin \<= 1.2.3 - Deserialization of untrusted data Vulnerability (CVSS 9.8)
- [CVE-2025-62981](https://cve.now/CVE-2025-62981.md): WordPress WP Gravity Forms Zoho CRM and Bigin plugin \<= 1.2.8 - Open Redirection vulnerability (CVSS 4.7)
- [CVE-2025-60209](https://cve.now/CVE-2025-60209.md): WordPress Connector for Gravity Forms and Google Sheets plugin \<= 1.2.6 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2025-60151](https://cve.now/CVE-2025-60151.md): WordPress WP Gravity Forms HubSpot Plugin \<= 1.2.5 - Open Redirection Vulnerability (CVSS 4.7)
- [CVE-2025-58006](https://cve.now/CVE-2025-58006.md): WordPress WP Gravity Forms Keap/Infusionsoft plugin \<= 1.2.6 - Open Redirection vulnerability (CVSS 4.7)
- [CVE-2025-54684](https://cve.now/CVE-2025-54684.md): WordPress Integration for Contact Form 7 and Constant Contact Plugin plugin \<= 1.1.7 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9)
- [CVE-2025-54682](https://cve.now/CVE-2025-54682.md): WordPress Connector for Gravity Forms and Google Sheets Plugin plugin \<= 1.2.4 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 5.4)
- [CVE-2025-54681](https://cve.now/CVE-2025-54681.md): WordPress Connector for Gravity Forms and Google Sheets Plugin plugin \<= 1.2.4 - Open Redirection Vulnerability (CVSS 4.7)
- [CVE-2025-49330](https://cve.now/CVE-2025-49330.md): WordPress Integration for Contact Form 7 and Zoho CRM, Bigin plugin \<= 1.3.0 - PHP Object Injection Vulnerability (CVSS 9.8)
- [CVE-2025-30953](https://cve.now/CVE-2025-30953.md): WordPress WP Gravity Forms Salesforce plugin \<= 1.4.7 - Open Redirection Vulnerability (CVSS 4.7)
- [CVE-2025-30954](https://cve.now/CVE-2025-30954.md): WordPress WP Gravity Forms Constant Contact Plugin \<= 1.1.0 - Open Redirection Vulnerability (CVSS 4.7)
- [CVE-2025-47456](https://cve.now/CVE-2025-47456.md): WordPress WP Gravity Forms Zendesk plugin \<= 1.1.2 - Open Redirection Vulnerability (CVSS 4.7)
- [CVE-2025-47455](https://cve.now/CVE-2025-47455.md): WordPress Integration for WooCommerce and Salesforce plugin \<= 1.7.5 - Open Redirection Vulnerability (CVSS 4.7)
- [CVE-2025-47454](https://cve.now/CVE-2025-47454.md): WordPress WP Gravity Forms Dynamics CRM plugin \<= 1.1.4 - Open Redirection Vulnerability (CVSS 4.7)
- [CVE-2025-39558](https://cve.now/CVE-2025-39558.md): WordPress CRM Perks plugin \<= 1.1.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-39600](https://cve.now/CVE-2025-39600.md): WordPress Integration for WooCommerce and QuickBooks plugin \<= 1.3.1 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3)
- [CVE-2025-32269](https://cve.now/CVE-2025-32269.md): WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms Plugin \<= 1.1.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability (CVSS 4.3)
- [CVE-2025-30863](https://cve.now/CVE-2025-30863.md): WordPress Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin \<= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2025-24558](https://cve.now/CVE-2025-24558.md): WordPress CRM Perks plugin \<= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-24708](https://cve.now/CVE-2025-24708.md): WordPress WP Dynamics CRM plugin \<= 1.1.6 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-37463](https://cve.now/CVE-2024-37463.md): WordPress CRM Perks Forms plugin \<= 1.1.5 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2024-35632](https://cve.now/CVE-2024-35632.md): WordPress Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms plugin \<= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-34755](https://cve.now/CVE-2024-34755.md): WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin \<= 1.3.9 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-34756](https://cve.now/CVE-2024-34756.md): WordPress Integration for HubSpot and Contact Form 7 plugin \<= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-34817](https://cve.now/CVE-2024-34817.md): WordPress Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms plugin \<= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-30446](https://cve.now/CVE-2024-30446.md): WordPress CRM Perks Forms plugin \<= 1.1.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-30499](https://cve.now/CVE-2024-30499.md): WordPress CRM Perks Forms plugin \<= 1.1.4 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2024-30498](https://cve.now/CVE-2024-30498.md): WordPress CRM Perks Forms plugin \<= 1.1.4 - Unauthenticated SQL Injection vulnerability (CVSS 9.3)
- [CVE-2023-51536](https://cve.now/CVE-2023-51536.md): WordPress CRM Perks Forms Plugin \<= 1.1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2023-31095](https://cve.now/CVE-2023-31095.md): WordPress Integration for Contact Form 7 HubSpot Plugin \<= 1.2.8 is vulnerable to Open Redirection (CVSS 4.7)
- [CVE-2023-37982](https://cve.now/CVE-2023-37982.md): WordPress Integration for Contact Form 7 and Salesforce Plugin \<= 1.3.3 is vulnerable to Open Redirection (CVSS 4.7)
- [CVE-2023-38478](https://cve.now/CVE-2023-38478.md): WordPress Integration for WooCommerce and QuickBooks Plugin \<= 1.2.3 is vulnerable to Open Redirection (CVSS 4.7)
- [CVE-2023-38481](https://cve.now/CVE-2023-38481.md): WordPress Integration for WooCommerce and Zoho CRM Plugin \< 1.3.7 is vulnerable to Open Redirection (CVSS 4.7)
- [CVE-2023-47779](https://cve.now/CVE-2023-47779.md): WordPress Integration for Contact Form 7 and Constant Contact Plugin \<= 1.1.4 is vulnerable to Open Redirection (CVSS 4.7)
- [CVE-2023-31212](https://cve.now/CVE-2023-31212.md): WordPress Contact Form Entries Plugin \<= 1.3.0 is vulnerable to SQL Injection (CVSS 8.5)
- [CVE-2023-33311](https://cve.now/CVE-2023-33311.md): WordPress Contact Form Entries Plugin \<= 1.3.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5)
- [CVE-2023-25976](https://cve.now/CVE-2023-25976.md): WordPress Integration for Contact Form 7 and Zoho CRM, Bigin Plugin \<= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3)
- [CVE-2022-38467](https://cve.now/CVE-2022-38467.md): WordPress CRM Perks Forms Plugin \<= 1.1.0 is vulnerable to Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/crm-perks
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.