PT-2025-43304 · Unknown · Wp Gravity Forms Hubspot

Bonds · Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-60151

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions WP Gravity Forms HubSpot versions through 1.2.5

Description The software contains an open redirect issue, allowing for potential phishing attacks. The issue resides in the way the application handles redirects to untrusted sites.

Recommendations Update WP Gravity Forms HubSpot to a version later than 1.2.5.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-60151

Affected Products

Wp Gravity Forms Hubspot

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-60151 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/gf-hubspot/vulnerability/wordpress-wp-gravity-forms-hubspot-plugin-1-2-5-open-redirection-vulnerability · Note
• https://twitter.com/CVEnew/status/1981046877547352066 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/gf-hubspot/vulnerability/wordpress-wp-gravity-forms-hubspot-plugin-1-2-5-open-redirection-vulnerability?_s_id=cve · Note