CVE Catalog
CVE-2025-60151
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk0.26%
17th percentile - higher than 17% of all known CVEs
Summary
An Open Redirect vulnerability in the WP Gravity Forms HubSpot plugin (gf-hubspot) up to version 1.2.5. It allows redirecting users to untrusted sites, potentially used for phishing.
Risk Assessment
Attackers can exploit the redirect to malicious sites, potentially leading to credential theft or malware infection.
Recommendation
It is recommended to update the plugin to the latest patched version and validate all redirects.
Other vulnerabilities in WP Gravity Forms HubSpot
Original NVD description (English source)
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Phishing.This issue affects WP Gravity Forms HubSpot: from n/a through <= 1.2.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS