CVE-2025-60174: CRM Perks WP Gravity Forms Constant Contact Plugin

Описание

Оригинално описание

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Object Injection.This issue affects WP Gravity Forms Constant Contact Plugin: from n/a through <= 1.1.2.

Засегнати продукти

• CRM Perks WP Gravity Forms Constant Contact Plugin: до 1.1.2

Вид слабост

• CWE-502 Десериализация на ненадеждни данни

История

Други уязвимости в CRM Perks WP Gravity Forms Constant Contact Plugin

• 4.7CVE-2025-30954

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-60174
• https://nvd.nist.gov/vuln/detail/CVE-2025-60174
• https://patchstack.com/database/Wordpress/Plugin/gf-constant-contact/vulnerability/wordpress-wp-gravity-forms-constant-contact-plugin-plugin-1-1-2-deserialization-of-untrusted-data-vulnerability?_s_id=cve