Open Redirect Vulnerability in WP Gravity Forms Keap/Infusionsoft Plugin by CRM Perks

CVE-2025-58006

What is CVE-2025-58006?

An open redirect vulnerability exists in the WP Gravity Forms Keap/Infusionsoft plugin developed by CRM Perks, which can lead to phishing attacks by redirecting users to untrusted sites. Versions from n/a to 1.2.4 are affected, posing significant risks to web applications relying on this plugin. It is essential for website administrators to update their plugins and implement security measures to mitigate the potential exploitation of this vulnerability.

References