WordPress security by component
CRM Perks Forms
Plugin description
CRM Perks Forms is a WordPress component with 9 published CVE records in this archive. The latest tracked vulnerability was published Jul 13, 2026; the highest CVE/CNA score is 9.3.
Plugin slug:
crm-perks-formsLatest vulnerability
CVE-2026-57421: CRM Perks Forms: Cross-site scripting
CRM Perks Forms is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 1.1.7.
| Safe version |
|
||
|---|---|---|---|
| Jul 13, 2026 |
CVE-2026-57421
CRM Perks Forms: Cross-site scripting
CRM Perks Forms is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 1.1.7.
|
1.1.8 |
CVE7.1
NVDPending
|
| Nov 01, 2024 |
CVE-2024-37463
CRM Perks Forms: A security weakness
CRM Perks Forms is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVD9.8
|
| Aug 06, 2024 |
CVE-2024-7484
CRM Perks Forms: Dangerous file upload
CRM Perks Forms is affected by dangerous file upload. Exploitation requires an authenticated WordPress account. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE7.2
NVDPending
|
| Mar 29, 2024 |
CVE-2024-30446
CRM Perks Forms: Cross-site scripting
CRM Perks Forms is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVD5.4
|
| Mar 29, 2024 |
CVE-2024-30499
CRM Perks Forms: SQL injection
CRM Perks Forms is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE8.5
NVD8.8
|
| Mar 29, 2024 |
CVE-2024-30498
CRM Perks Forms: SQL injection
CRM Perks Forms is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE9.3
NVD10.0
|
| Feb 01, 2024 |
CVE-2023-51536
CRM Perks Forms – WordPress Form Builder: Cross-site scripting
CRM Perks Forms – WordPress Form Builder is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.9
NVD4.8
|
| May 31, 2023 |
CVE-2023-2836
CRM Perks Forms: Cross-site scripting
CRM Perks Forms is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE4.4
NVD4.8
|
| Jan 14, 2023 |
CVE-2022-38467
Crm Perks Forms: Cross-site scripting
Crm Perks Forms is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.1
NVD6.1
|