crmperks vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20245
3. 20254
4. 20266

Newest CVEs

• CVE-2026-9145

  Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value'

  crmperks · Database for Contact Form 7, WPforms, Elementor forms

  Medium6.5
• CVE-2026-9843

  Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value

  crmperks · Database for Contact Form 7, WPforms, Elementor forms

  High8.1
• CVE-2026-3831

  Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode

  crmperks · Database for Contact Form 7, WPforms, Elementor forms

  Medium4.3
• CVE-2026-2599

  Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv'

  crmperks · Database for Contact Form 7, WPforms, Elementor forms

  Critical9.8
• CVE-2026-2568

  WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting

  crmperks · WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms

  High7.2
• CVE-2026-0825

  Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export

  crmperks · Database for Contact Form 7, WPforms, Elementor forms

  Medium5.3
• CVE-2025-7384

  Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion

  crmperks · Database for Contact Form 7, WPforms, Elementor forms

  Critical9.8
• CVE-2025-7697

  Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val Function

  crmperks · Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms

  Critical9.8
• CVE-2025-7696

  Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.2.3 - Unauthenticated PHP Object Injection via verify_field_val Function

  crmperks · Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms

  Critical9.8
• CVE-2025-4659

  Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.4.4 - Unauthenticated Full Path Disclosure

  crmperks · Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms

  Medium5.3