Ccrmperks

Products

Exploited and recent CVEs

• CVE-2026-9145 Medium 6.5 Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value' 0.4%
• CVE-2026-9843 High 8.1 Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value 1.0%
• CVE-2026-3831 Medium 4.3 Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode 0.2%
• CVE-2026-2599 Critical 9.8 Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv' 0.6%
• CVE-2026-2568 High 7.2 WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting 0.3%
• CVE-2026-0825 Medium 5.3 Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export 0.4%
• CVE-2025-7384 Critical 9.8 Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion 1.3%
• CVE-2025-7697 Critical 9.8 Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val Function 1.3%
• CVE-2025-7696 Critical 9.8 Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.2.3 - Unauthenticated PHP Object Injection via verify_field_val Function 1.2%
• CVE-2025-4659 Medium 5.3 Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.4.4 - Unauthenticated Full Path Disclosure 0.3%
• CVE-2024-12443 Medium 6.4 CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-7484 High 7.2 CRM Perks Forms <= 1.1.3 - Authenticated (Administrator+) Arbitrary File Upload 0.9%
• CVE-2024-3715 High 7.2 Database for Contact Form 7, WPforms, Elementor forms <= 1.3.8 - Unauthenticated Stored Cross-Site Scripting 0.6%
• CVE-2024-2030 Medium 6.4 Database for Contact Form 7, WPforms, Elementor forms <= 1.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode 0.6%
• CVE-2024-1069 High 7.2 Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload 1.2%
• CVE-2023-2836 Medium 4.4 CRM Perks Forms <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting 0.6%