crmperks vulnerabilities
16 published CVEs name crmperks among the affected products.
- 16Published CVEs16 of them scored
- 6Last 12 monthspublished in the last year
- 4Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-9145
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value'
crmperks · Database for Contact Form 7, WPforms, Elementor forms
Medium6.5 - CVE-2026-9843
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value
crmperks · Database for Contact Form 7, WPforms, Elementor forms
High8.1 - CVE-2026-3831
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode
crmperks · Database for Contact Form 7, WPforms, Elementor forms
Medium4.3 - CVE-2026-2599
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv'
crmperks · Database for Contact Form 7, WPforms, Elementor forms
Critical9.8 - CVE-2026-2568
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting
crmperks · WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
High7.2 - CVE-2026-0825
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export
crmperks · Database for Contact Form 7, WPforms, Elementor forms
Medium5.3 - CVE-2025-7384
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion
crmperks · Database for Contact Form 7, WPforms, Elementor forms
Critical9.8 - CVE-2025-7697
Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val Function
crmperks · Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms
Critical9.8 - CVE-2025-7696
Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.2.3 - Unauthenticated PHP Object Injection via verify_field_val Function
crmperks · Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms
Critical9.8 - CVE-2025-4659
Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.4.4 - Unauthenticated Full Path Disclosure
crmperks · Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms
Medium5.3