CVE-2025-62981

MediumCVSS 4.7

Published: 27/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

The WP Gravity Forms Zoho CRM and Bigin plugin by CRM Perks contains an open redirect vulnerability, allowing phishing. This issue affects versions up to and including 1.2.8.

Risk Assessment

Users may be redirected to malicious sites, potentially leading to credential theft or malware installation.

Recommendation

Update the WP Gravity Forms Zoho CRM and Bigin plugin to the latest patched version.

Other vulnerabilities in WP Gravity Forms Zoho CRM and Bigin

CVE-2025-60091Critical
Deserialization of untrusted data vulnerability in WP Gravity Forms Zoho CRM and Bigin allows object injection. The issue affects versions up to and including 1.2.9.

Original NVD description (English source)

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Phishing.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through <= 1.2.8.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS