CVE-2025-31821
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Apr 1, 2025
CWE ID 601
Summary
CVE-2025-31821 is a critical vulnerability affecting the integration of Zoho CRM and Contact Form 7. This Open Redirect flaw permits an attacker to redirect users to untrusted sites, potentially executing phishing attacks. The vulnerability, present in versions from n/a through 1.0.6, poses a significant security risk and should be addressed promptly. Users are advised to upgrade to the latest version of the integration to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress