CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.0.
Explanation of Vulnerability in Simple Terms
The Integration for Pipedrive plugin for Contact Form 7, WPForms, Elementor, and Ninja Forms is vulnerable to cross-site request forgery (CSRF). An attacker can trick a site administrator into performing unintended actions, such as modifying plugin settings or disconnecting the Pipedrive integration, by sending them a malicious link or embedding code on a webpage. The vulnerability affects versions up to 1.2.0.
What an attacker can do
Trick an admin into changing plugin settings or disconnecting the Pipedrive integration without their knowledge.
Potential impact on your site
Plugin settings could be altered or the Pipedrive integration disabled, disrupting lead capture workflows.
Conditions required to exploit
Admin must visit a malicious page or click a crafted link while logged into WordPress.
Key dates
External resources
Related vulnerabilities
