PT-2025-38856 · Unknown · Crm Perks Wp Gravity Forms Keap/Infusionsoft

Bonds · CVE-2025-58006 · Publicado 2025-09-22 · Atualizado 2025-09-22

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CRM Perks WP Gravity Forms Keap/Infusionsoft versions through 1.2.4

Description The software contains a flaw that allows for redirection to untrusted sites, potentially enabling phishing attacks. This issue impacts the application's handling of redirects, allowing an attacker to manipulate the redirection destination.

Recommendations Update CRM Perks WP Gravity Forms Keap/Infusionsoft to a version later than 1.2.4.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2025-58006

Produtos afetados

Crm Perks Wp Gravity Forms Keap/Infusionsoft

Referências · 4

• https://patchstack.com/database/wordpress/plugin/gf-infusionsoft/vulnerability/wordpress-wp-gravity-forms-keap-infusionsoft-plugin-1-2-4-open-redirection-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/1970255681946296684 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-58006 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Plugin/gf-infusionsoft/vulnerability/wordpress-wp-gravity-forms-keap-infusionsoft-plugin-1-2-4-open-redirection-vulnerability?_s_id=cve · Nota