WordPress Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val Function vulnerability

🗓️ 21 Jul 2025 01:44:08Reported by Phat RiO - BlueRockType

patchstack

patchstack🔗 patchstack.com👁 6 Views

WordPress plugin for Google Sheets is vulnerable to PHP Object Injection in versions <= 1.1.1

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-7697	19 Jul 202508:36	–	circl
CNNVD	WordPress plugin Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms 代码问题漏洞	19 Jul 202500:00	–	cnnvd
CVE	CVE-2025-7697	19 Jul 202504:23	–	cve
Cvelist	CVE-2025-7697 Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val Function	19 Jul 202504:23	–	cvelist
EUVD	EUVD-2025-21948	3 Oct 202520:07	–	euvd
NVD	CVE-2025-7697	19 Jul 202505:15	–	nvd
Positive Technologies	PT-2025-30115 · WordPress +1 · Integration For Google Sheets/Contact Form 7 +1	19 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-7697	21 Jul 202504:48	–	redhatcve
Vulnrichment	CVE-2025-7697 Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val Function	19 Jul 202504:23	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 14, 2025 to July 20, 2025)	24 Jul 202514:26	–	wordfence

Vulners

Node

wordpress integration_for_google_sheets_and_contact_form_7,_wpforms,_elementor,_ninja_formsRange≤1.1.1

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/integration-for-contact-form-7-and-google-sheets/integration-for-google-sheets-and-contact-form-7-wpforms-elementor-ninja-forms-111-unauthenticated-php-object-injection-via-verify-field-val-function

21 Jul 2025 01:44Current

7.1High risk

Vulners AI Score7.1

CVSS 3.19.8

EPSS0.03264

SSVC

wordpress plugin google sheets integration php object injection vulnerable versions cve-2025-7697