PT-2025-53278 · WordPress · Crm Perks Integration For Contact Form 7 Hubspot

Published 2025-12-24 · Updated 2025-12-25 · CVE-2025-68590

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions CRM Perks Integration for Contact Form 7 HubSpot versions through 1.4.2

Description A flaw exists in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot that allows for Blind SQL Injection. This is due to improper neutralization of special elements used in an SQL command.

Recommendations Update CRM Perks Integration for Contact Form 7 HubSpot to a version later than 1.4.2.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-68590

Affected Products

Crm Perks Integration For Contact Form 7 Hubspot

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-68590 · Security Note
• https://twitter.com/TheHackerWire/status/2004035602833092883 · Twitter Post
• https://twitter.com/CVEnew/status/2003932348157399222 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/cf7-hubspot/vulnerability/wordpress-integration-for-contact-form-7-hubspot-plugin-1-4-2-sql-injection-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/cf7-hubspot/vulnerability/wordpress-integration-for-contact-form-7-hubspot-plugin-1-4-2-sql-injection-vulnerability?_s_id=cve · Note