Integration For Contact Form 7 And Google Sheets Vulnerabilities & Security Issues

Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val Function

critical

The Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.1 via deserialization of untrusted input within the verify_field_val() function. This makes it possible for unauthenticated attackers...

CVSS:: 9.8
Affected:: up to 1.1.1
Fixed in:: 1.1.2
Disclosed:: Jul 18, 2025

CVE-2025-7697 on NVD →

Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.0.9 - Cross-Site Request Forgery

medium

The Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.9. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to...

CVSS:: 4.3
Affected:: up to 1.0.9
Fixed in:: 1.1.0
Disclosed:: Mar 27, 2025

CVE-2025-30863 on NVD →

Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms [integration-for-contact-form-7-and-google-sheets] < 1.1.0

unknown

[en] Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms allows Cross Site Request Forgery. This issue affects Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.0.9.

Affected:: up to 1.1.0
Fixed in:: 1.1.0
Disclosed:: Mar 27, 2025