Volerion logoVolerion
Volerion logoVolerion

CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms Open Redirect Vulnerability

Vulnerability

A URL redirection vulnerability allowing untrusted site redirection (open redirect) has been identified in the CRM Perks Integration for HubSpot, Contact Form 7, WPForms, Elementor, and Ninja Forms. This vulnerability affects versions through 1.2.8.

Impact

Exploitation of this vulnerability could lead to open redirection, allowing attackers to redirect users to malicious sites, potentially causing phishing incidents.

Remediation

Users of the affected plugin should update to version 1.2.9 or later. Patchstack users can enable auto-update for vulnerable plugins.

Added: May 15, 2026, 8:55 AM
Updated: May 15, 2026, 8:55 AM

Vulnerability Rating

Custom Algorithm
spread
6.4
impact
0.2
exploitability
6.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.