Open Redirect Vulnerability in WP Gravity Forms Keap/Infusionsoft Plugin by CRM Perks
CVE-2025-58006

4.7MEDIUM

Key Information:

Vendor

WordPress
Status
WP Gravity Forms Keap/infusionsoft
Vendor
CVE Published:
22 September 2025

What is CVE-2025-58006?

An open redirect vulnerability exists in the WP Gravity Forms Keap/Infusionsoft plugin developed by CRM Perks, which can lead to phishing attacks by redirecting users to untrusted sites. Versions from n/a to 1.2.4 are affected, posing significant risks to web applications relying on this plugin. It is essential for website administrators to update their plugins and implement security measures to mitigate the potential exploitation of this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

WP Gravity Forms Keap/Infusionsoft <= 1.2.4

References

https://patchstack.com/database/wordpress/plugin/gf-infus...
vdb-entry

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bonds (Patchstack Alliance)
JSON
.