Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms, CVE-2025-68590

CVE, Research URL: CVE-2025-68590
Home page URL: Security reports for Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms
Application: Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms
Published on: Dec 24, 2025
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot allows Blind SQL Injection.This issue affects Integration for Contact Form 7 HubSpot: from n/a through <= 1.4.2.
Affected versions: max 1.4.2.
Status: vulnerable