CVE-2025-32269: WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms Plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms allows Cross Site Request Forgery. This issue affects WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: from n/a through 1.1.3.
Other sources
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-zendesk allows Cross Site Request Forgery.This issue affects WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: from n/a through <= 1.1.3.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32269?
CVE-2025-32269 is classified as a moderate severity Cross-Site Request Forgery (CSRF) vulnerability.
How do I fix CVE-2025-32269?
To mitigate CVE-2025-32269, update the affected plugins, WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable, and Ninja Forms, to version 1.1.4 or later.
Which versions are affected by CVE-2025-32269?
CVE-2025-32269 affects versions 1.1.3 and lower of WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable, and Ninja Forms.
What types of attacks can CVE-2025-32269 enable?
CVE-2025-32269 can enable attackers to perform unauthorized actions on behalf of authenticated users due to Cross-Site Request Forgery.
Who is primarily impacted by CVE-2025-32269?
Users of the CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable, and Ninja Forms plugins are primarily impacted by CVE-2025-32269.