CVE-2023-37982

Summary

CVE-2023-37982 is a newly identified URL Redirection vulnerability that affects the CRM Perks Integration for Salesforce and several popular WordPress plugins, namely Contact Form 7, WPForms, Elementor, and Ninja Forms. This Open Redirect issue allows an attacker to redirect unsuspecting users to malicious websites, potentially leading to phishing or data theft. The vulnerability can be exploited by attackers through specially crafted URLs, and affects versions of the plugins from n/a through 1.3.3. Users are strongly advised to update these plugins to their latest, secure versions as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.