Lucene search
+L

36 matches found

CVE
CVE
added 2025/06/17 3:01 p.m.37 views

CVE-2025-49330

CVE-2025-49330 is a Deserialization of Untrusted Data vulnerability in the WordPress plugin integration for Contact Form 7 and Zoho CRM, Bigin (WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms – CRM, Bigin). The issue enables PHP object injection via untrusted data in ve...

9.8CVSS5.9AI score0.00556EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/17 3:01 p.m.4 views

CVE-2025-49330 WordPress Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.3.0 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin allows Object Injection. This issue affects Integration for Contact Form 7 and Zoho CRM, Bigin: from n/a through 1.3.0...

9.8CVSS7.2AI score0.00556EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/17 12:00 a.m.10 views

WordPress plugin Integration for Contact Form 7 and Zoho CRM, Bigin 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in the...

9.8CVSS6.8AI score0.00556EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 5:27 a.m.21 views

CVE-2023-25976

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin = 1.2.2 versions...

8.8CVSS8.9AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/19 8:15 p.m.26 views

Open redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin.This issue affects Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin: from n/a before 1.3.7...

5.8CVSS7.1AI score0.00469EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/19 8:00 p.m.68 views

CVE-2023-38481

CVE-2023-38481 is an Open Redirect vulnerability in the CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin. Affected versions are before 1.3.7 (vendor/n/a). The issue allows redirection to an untrusted site, enabling a user-safe impact such as phishing-like redir...

6.1CVSS7AI score0.00469EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/06/19 11:15 a.m.14 views

CVE-2023-2527

The Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin before 1.2.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

4.8CVSS7.3AI score0.0044EPSS
SaveExploits2References2
CVE
CVE
added 2023/06/19 10:52 a.m.55 views

CVE-2023-2527

CVE-2023-2527 : The WordPress plugin “Integration for Contact Form 7 and Zoho CRM, Bigin” (vulnerable before 1.2.4) contains a SQL injection due to improper sanitization/escaping of a parameter before use in a SQL statement. The issue is exploitable by high-privilege users (e.g., administrators)....

4.8CVSS5.7AI score0.0044EPSS
SaveExploits2References2Affected Software1
CNNVD
CNNVD
added 2023/06/19 12:00 a.m.39 views

WordPress plugin Integration for Contact Form 7 and Zoho CRM, Bigin SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Integration for Contact Fo...

4.8CVSS6.6AI score0.0044EPSS
SaveExploits2References2
OSV
OSV
added 2023/05/26 12:15 p.m.8 views

CVE-2023-25976

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin = 1.2.2 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/26 12:15 p.m.68 views

CVE-2023-25976

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin = 1.2.2 versions...

8.8CVSS5.9AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/26 12:15 p.m.29 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin = 1.2.2 versions...

6.8CVSS8.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/26 11:13 a.m.71 views

CVE-2023-25976 WordPress Integration for Contact Form 7 and Zoho CRM, Bigin Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin = 1.2.2 versions...

4.3CVSS9.1AI score0.00256EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/05/26 12:00 a.m.15 views

PT-2023-20401 · Zoho · Bigin

Name of the Vulnerable Software and Affected Versions: CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin versions 1.2.2 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the specified plugin. This type of issue allows an attacker to trick a user into...

8.8CVSS8.9AI score0.00256EPSS
SaveExploits0References3
wpexploit
wpexploit
added 2023/05/22 12:00 a.m.170 views

Integration for Contact Form 7 and Zoho CRM, Bigin < 1.2.4 - Admin+ SQLi

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin 1. Send a GET request with...

4.8CVSS9.8AI score0.0044EPSS
SaveExploits2
Patchstack
Patchstack
added 2023/02/22 12:00 a.m.16 views

WordPress Integration for Contact Form 7 and Zoho CRM, Bigin Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Integration for Contact Form 7 and Zoho CRM, Bigin Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25976 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

8.8CVSS7AI score0.00256EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder