PT-2025-20089 · Unknown · Crm Perks Integration For Woocommerce/Salesforce

Nguyen Xuan Chien · Published 2025-05-07 · Updated 2025-05-07 · CVE-2025-47455

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CRM Perks Integration for WooCommerce and Salesforce versions 1.7.5 and earlier

Description The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which can be used for Phishing attacks.

Recommendations For versions 1.7.5 and earlier, update to a version later than 1.7.5 to resolve the issue. As a temporary workaround, consider restricting access to untrusted sites to minimize the risk of exploitation.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-47455

Affected Products

Crm Perks Integration For Woocommerce/Salesforce

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-47455 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/woo-salesforce-plugin-crm-perks/vulnerability/wordpress-integration-for-woocommerce-and-salesforce-1-7-5-open-redirection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1920246438555988402 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/woo-salesforce-plugin-crm-perks/vulnerability/wordpress-integration-for-woocommerce-and-salesforce-1-7-5-open-redirection-vulnerability?_s_id=cve · Note