CVE-2025-67587

MediumCVSS 4.7

Published: 09/12/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

An open redirect vulnerability in WP Gravity Forms FreshDesk plugin (up to 1.3.5) allows phishing by redirecting users to untrusted sites.

Risk Assessment

Users may be redirected to malicious sites, increasing the risk of credential theft.

Recommendation

Update the plugin to the latest version and consider validating outgoing URLs.

Other vulnerabilities in WP Gravity Forms FreshDesk Plugin

CVE-2025-60089Critical
Deserialization of untrusted data vulnerability in WP Gravity Forms FreshDesk Plugin allows object injection. The issue affects versions up to and including 1.3.5.

Original NVD description (English source)

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Phishing.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through <= 1.3.5.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS