CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-30954: WordPress WP Gravity Forms Constant Contact Plugin <= 1.1.0 - Open Redirection Vulnerability

4.7 CVSS

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin allows Phishing. This issue affects WP Gravity Forms Constant Contact Plugin: from n/a through 1.1.0.

Classification

CVE ID: CVE-2025-30954

CVSS Base Severity: MEDIUM

CVSS Base Score: 4.7

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Problem Types

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

Affected Products

Vendor: CRM Perks

Product: WP Gravity Forms Constant Contact Plugin

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.03% (probability of being exploited)

EPSS Percentile: 6.97% (scored less or equal to compared to others)

EPSS Date: 2025-06-25 (when was this score calculated)

References

https://nvd.nist.gov/vuln/detail/CVE-2025-30954
https://patchstack.com/database/wordpress/plugin/gf-constant-contact/vulnerability/wordpress-wp-gravity-forms-constant-contact-plugin-1-1-0-open-redirection-vulnerability?_s_id=cve

Timeline