SecAlerts
crm perks logo

crm perks

Security Risk Profile

46
/100
medium

Security Risk Score

Comprehensive risk assessment based on 29 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 29, 2024 to present

29
Total CVEs
11
Critical+High
0
Exploited
3
Unpatched

Threat Assessment

Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
46/100
medium

Severity Distribution

Critical
6
High
5
Medium
18
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
12

Age Distribution

Common Weaknesses (CWE)

1
XSS
6
2
CSRF
6
3
SQL Injection
2
4
Malicious File Upload
1

Most Affected Products

1. crmperks Crm Perks Forms Wordpress5
2. CRM Perks CRM Perks Forms4
3. WordPress CRM Perks Forms4
4. CRM Perks WP Gravity Forms Salesforce2
5. CRM Perks Connector for Gravity Forms and Google Sheets2

Recent Vulnerabilities

See more →
CVE-2026-25430
CVSS 6.5medium

WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.2.2 - Broken Access Control vulnerability

3/25/2026🔧 No Patch
CVE-2025-60180
CVSS 9.8critical

WordPress WP Gravity Forms Salesforce plugin <= 1.5.1 - PHP Object Injection vulnerability

12/18/2025🔧 No Patch
CVE-2025-58636
CVSS 9.8critical

WordPress WP Gravity Forms Keap/Infusionsoft Plugin <= 1.2.3 - Deserialization of untrusted data Vulnerability

11/6/2025🔧 No Patch
CVE-2025-62981
CVSS 4.7medium

WordPress WP Gravity Forms Zoho CRM and Bigin plugin <= 1.2.8 - Open Redirection vulnerability

10/27/2025🔧 No Patch
CVE-2025-60209
CVSS 9.8critical

WordPress Connector for Gravity Forms and Google Sheets plugin <= 1.2.6 - PHP Object Injection vulnerability

10/22/2025🔧 No Patch
CVE-2025-60151
CVSS 4.7medium

WordPress WP Gravity Forms HubSpot Plugin <= 1.2.5 - Open Redirection Vulnerability

10/22/2025🔧 No Patch
CVE-2025-58006
CVSS 4.7medium

WordPress WP Gravity Forms Keap/Infusionsoft plugin <= 1.2.6 - Open Redirection vulnerability

9/22/2025🔧 No Patch
CVE-2025-54684
CVSS 5.9medium

WordPress Integration for Contact Form 7 and Constant Contact Plugin plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability

8/14/2025
CVE-2025-54682
CVSS 5.4medium

WordPress Connector for Gravity Forms and Google Sheets Plugin plugin <= 1.2.4 - Cross Site Request Forgery (CSRF) Vulnerability

8/14/2025
CVE-2025-54681
CVSS 4.7medium

WordPress Connector for Gravity Forms and Google Sheets Plugin plugin <= 1.2.4 - Open Redirection Vulnerability

8/14/2025

Monitor crm perks in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.