PT-2025-43309 · Google+2 · Google Sheets+2

Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-60209

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CRM Perks Connector for Gravity Forms and Google Sheets versions through 1.2.6

Description The CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets contains a flaw related to the deserialization of untrusted data, which can lead to object injection. This issue impacts the Connector for Gravity Forms and Google Sheets.

Recommendations Update to a version newer than 1.2.6.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-60209

Affected Products

Crm Perks Connector For Gravity Forms/Google Sheets

Google Sheets

Gravity Forms

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-60209 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/wp-gravity-forms-spreadsheets/vulnerability/wordpress-connector-for-gravity-forms-and-google-sheets-plugin-1-2-5-php-object-injection-vulnerability · Note
• https://twitter.com/CVEnew/status/1981046872333832438 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/wp-gravity-forms-spreadsheets/vulnerability/wordpress-connector-for-gravity-forms-and-google-sheets-plugin-1-2-5-php-object-injection-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/wp-gravity-forms-spreadsheets/vulnerability/wordpress-connector-for-gravity-forms-and-google-sheets-plugin-1-2-5-php-object-injection-vulnerability?_s_id=cve · Note