What is the CVSS score of CVE-2025-49330?

CVE-2025-49330 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of CRM Perks Integration are affected by CVE-2025-49330?

A critical vulnerability in the CRM Perks Integration plugin for Contact Form 7 and Zoho CRM allows attackers to inject malicious objects through deserialization, potentially leading to remote code…

How to fix or mitigate CVE-2025-49330?

Within 24 hours: Identify all WordPress instances running CRM Perks Integration versions 1.3.0 and earlier; disable the plugin immediately as a temporary measure and document the business impact. Within 7 days: Evaluate alternative contact form solutions or request a timeline from the vendor for patch availability; implement enhanced monitoring for suspicious activity. Within 30 days: Deploy the vendor patch as soon as released, or migrate to an alternative plugin with equivalent functionality and proper security review.

CRM Perks Integration CVE-2025-49330

EUVD-2025-28295 CRITICAL

Deserialization of Untrusted Data (CWE-502)

2025-06-17 audit@patchstack.com

Deserialization

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 23, 2026 - 15:42 vuln.today

cvss_changed

EUVD ID Assigned

Mar 14, 2026 - 22:15 euvd

EUVD-2025-28295

Analysis Generated

Mar 14, 2026 - 22:15 vuln.today

CVE Published

Jun 17, 2025 - 15:15 nvd

CRITICAL 9.8

DescriptionCVE.org

Deserialization of Untrusted Data vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin allows Object Injection. This issue affects Integration for Contact Form 7 and Zoho CRM, Bigin: from n/a through 1.3.0.

AnalysisAI

A deserialization vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM (CVSS 9.8). Critical severity with potential for significant impact on affected systems.

Technical ContextAI

CWE-502 (Insecure Deserialization). CVSS 9.8 indicates critical severity with likely remote exploitation vector. Affects CRM Perks Integration for Contact Form 7 and Zoho CRM.

RemediationAI

Monitor vendor channels for patch availability.

CVE-2025-49330 vulnerability details – vuln.today

Back

CRM Perks Integration CVE-2025-49330

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code