https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-60180.htmlhttps://patchthecve.com/cve/CVE-2025-60180.htmlWed, 17 Jun 2026 09:49:30 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue affects WP Gravity Forms Salesforce: from n/a through <= 1.5.1.https://patchthecve.com/cve/CVE-2025-60178.htmlhttps://patchthecve.com/cve/CVE-2025-60178.htmlWed, 17 Jun 2026 09:49:29 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Object Injection.This issue affects WP Gravity Forms HubSpot: from n/a through <= 1.2.6.https://patchthecve.com/cve/CVE-2025-60174.htmlhttps://patchthecve.com/cve/CVE-2025-60174.htmlWed, 17 Jun 2026 09:49:29 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Object Injection.This issue affects WP Gravity Forms Constant Contact Plugin: from n/a through <= 1.1.2.https://patchthecve.com/cve/CVE-2025-60091.htmlhttps://patchthecve.com/cve/CVE-2025-60091.htmlWed, 17 Jun 2026 09:49:19 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Object Injection.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through <= 1.2.9.https://patchthecve.com/cve/CVE-2025-60090.htmlhttps://patchthecve.com/cve/CVE-2025-60090.htmlWed, 17 Jun 2026 09:49:19 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Insightly gf-insightly allows Object Injection.This issue affects WP Gravity Forms Insightly: from n/a through <= 1.1.6.https://patchthecve.com/cve/CVE-2025-60089.htmlhttps://patchthecve.com/cve/CVE-2025-60089.htmlWed, 17 Jun 2026 09:49:19 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Object Injection.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through <= 1.3.5.https://patchthecve.com/cve/CVE-2024-37463.htmlhttps://patchthecve.com/cve/CVE-2024-37463.htmlWed, 17 Jun 2026 07:38:24 +0000MEDIUM 5.3: Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5.https://patchthecve.com/cve/CVE-2024-7484.htmlhttps://patchthecve.com/cve/CVE-2024-7484.htmlWed, 17 Jun 2026 08:20:17 +0000HIGH 7.2: The CRM Perks Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'handle_uploaded_files' function in versions up to, and including, 1.1.3. This makes it possible for authenticated attackers with administrator-level capabilities or above, to https://patchthecve.com/cve/CVE-2024-30446.htmlhttps://patchthecve.com/cve/CVE-2024-30446.htmlWed, 17 Jun 2026 07:26:59 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms allows Stored XSS.This issue affects CRM Perks Forms: from n/a through 1.1.4.https://patchthecve.com/cve/CVE-2024-30499.htmlhttps://patchthecve.com/cve/CVE-2024-30499.htmlWed, 17 Jun 2026 07:27:04 +0000HIGH 8.5: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.https://patchthecve.com/cve/CVE-2024-30498.htmlhttps://patchthecve.com/cve/CVE-2024-30498.htmlWed, 17 Jun 2026 07:27:04 +0000CRITICAL 9.3: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.