PT-2025-20203 · Elementor+1 · Elementor+1

Nguyen Xuan Chien · Published 2025-05-07 · Updated 2025-05-07 · CVE-2025-47644

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zoho CRM with Elementor form versions 1.0.0 through 1.0.7

Description The issue is related to a URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the formsintegrations Integrations of Zoho CRM with Elementor form, which allows phishing attacks.

Recommendations For versions 1.0.0 through 1.0.7, consider restricting access to the vulnerable integration until a patch is available. As a temporary workaround, avoid using the integration with Elementor form in Zoho CRM until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-47644

Affected Products

Elementor

Zoho Crm

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-47644 · Security Note
• https://twitter.com/CVEnew/status/1920130513014255920 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/integrations-of-zoho-crm-with-elementor-form/vulnerability/wordpress-integrations-of-zoho-crm-with-elementor-form-1-0-7-open-redirection-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/integrations-of-zoho-crm-with-elementor-form/vulnerability/wordpress-integrations-of-zoho-crm-with-elementor-form-1-0-7-open-redirection-vulnerability?_s_id=cve · Note