CVE-2025-49330

Deserialization of Untrusted Data vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin cf7-zoho allows Object Injection.This issue affects Integration for Contact Form 7 and Zoho CRM, Bigin: from n/a through <= 1.3.0.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - audit@patchstack.com

Published

2025-06-17

Last modified

2026-04-28

Weaknesses

CWE-502

Affected products

• Bigin (Crm Perks)
• Integration For Contact Form 7 And Zoho Crm (Crm Perks)

References

• https://patchstack.com/database/Wordpress/Plugin/cf7-zoho/vulnerability/wordpress-integration-for-contact-form-7-and-zo…