PT-2025-38856 · Unknown · Crm Perks Wp Gravity Forms Keap/Infusionsoft

Bonds · Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-58006

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CRM Perks WP Gravity Forms Keap/Infusionsoft versions through 1.2.4

Description The software contains a flaw that allows for redirection to untrusted sites, potentially enabling phishing attacks. This issue impacts the application's handling of redirects, allowing an attacker to manipulate the redirection destination.

Recommendations Update CRM Perks WP Gravity Forms Keap/Infusionsoft to a version later than 1.2.4.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-58006

Affected Products

Crm Perks Wp Gravity Forms Keap/Infusionsoft

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-58006 · Security Note
• https://patchstack.com/database/wordpress/plugin/gf-infusionsoft/vulnerability/wordpress-wp-gravity-forms-keap-infusionsoft-plugin-1-2-4-open-redirection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1970255681946296684 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/gf-infusionsoft/vulnerability/wordpress-wp-gravity-forms-keap-infusionsoft-plugin-1-2-4-open-redirection-vulnerability?_s_id=cve · Note