WordPress Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.2.3 - Unauthenticated PHP Object Injection via verify_field_val Function vulnerability

🗓️ 21 Jul 2025 01:43:41Reported by Phat RiO - BlueRockType

WordPress integration plugins are vulnerable to PHP Object Injection in versions <= 1.2.3, fix in 1.2.4

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-7696	19 Jul 202505:24	–	circl
CNNVD	WordPress plugin Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms 代码问题漏洞	19 Jul 202500:00	–	cnnvd
CVE	CVE-2025-7696	19 Jul 202504:23	–	cve
Cvelist	CVE-2025-7696 Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.2.3 - Unauthenticated PHP Object Injection via verify_field_val Function	19 Jul 202504:23	–	cvelist
EUVD	EUVD-2025-21949	3 Oct 202520:07	–	euvd
NVD	CVE-2025-7696	19 Jul 202505:15	–	nvd
Positive Technologies	PT-2025-30114 · Unknown +1 · Contact Form 7 +1	19 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-7696	21 Jul 202504:48	–	redhatcve
Vulnrichment	CVE-2025-7696 Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.2.3 - Unauthenticated PHP Object Injection via verify_field_val Function	19 Jul 202504:23	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 14, 2025 to July 20, 2025)	24 Jul 202514:26	–	wordfence

Vulners

Node

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/integration-for-contact-form-7-and-pipedrive/integration-for-pipedrive-and-contact-form-7-wpforms-elementor-ninja-forms-123-unauthenticated-php-object-injection-via-verify-field-val-function

21 Jul 2025 01:43Current

7.1High risk

Vulners AI Score7.1

CVSS 3.19.8

EPSS0.01033

SSVC