CRM Perks WP Gravity Forms Zoho CRM and Bigin Deserialization Vulnerability Allowing Object Injection

A deserialization vulnerability allowing object injection has been identified in the CRM Perks WP Gravity Forms Zoho CRM and Bigin plugin, affecting versions through 1.2.9. This vulnerability arises from the deserialization of untrusted data, which can be exploited to inject malicious objects.

Impact

Exploitation of this vulnerability allows for object injection, which could be used to manipulate application logic or execute arbitrary code, depending on the injected object's handling.