CVE-2025-67587: WordPress WP Gravity Forms FreshDesk Plugin plugin <= 1.3.5 - Open Redirection vulnerability
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Phishing.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through <= 1.3.5.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67587?
CVE-2025-67587 is classified as a medium severity vulnerability due to its ability to facilitate phishing attacks.
How do I fix CVE-2025-67587?
To remove the vulnerability associated with CVE-2025-67587, update the WP Gravity Forms FreshDesk Plugin to a version higher than 1.3.5.
What is the impact of CVE-2025-67587?
CVE-2025-67587 allows attackers to redirect users to untrusted sites, potentially leading to phishing attacks.
Which versions are affected by CVE-2025-67587?
CVE-2025-67587 affects the WP Gravity Forms FreshDesk Plugin from versions n/a through 1.3.5.
Can CVE-2025-67587 be exploited remotely?
Yes, CVE-2025-67587 can be exploited remotely, allowing attackers to perform open redirection attacks.