Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More Security & Risk Analysis
wordpress.org/plugins/crm-integration-freshworks-any-formConnect Contact Form 7, WPForms, Elementor Forms, Gravity Forms, and more form submissions with Freshsales CRM.
Is Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More Safe to Use in 2026?
Generally Safe
Score 97/100Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.
The plugin 'crm-integration-freshworks-anyform' exhibits a generally strong security posture, particularly in its handling of SQL queries and output escaping, with nearly all queries using prepared statements and almost all outputs being properly escaped. The absence of known vulnerabilities in its history is also a positive indicator. However, the static analysis reveals some areas for improvement. The presence of 7 flows with unsanitized paths, including 3 of high severity, is a notable concern and suggests potential injection vulnerabilities. While the plugin has a small attack surface and all identified entry points have authentication checks, these unsanitized flows could still be exploited if they lead to exploitable code execution or data leakage through other means. The plugin's reliance on external HTTP requests also warrants attention for potential risks related to insecure communication or reliance on vulnerable external services.
Key Concerns
- High severity taint flows with unsanitized paths
- Flows with unsanitized paths
- External HTTP requests
Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More Security Vulnerabilities
CVEs by Year
Severity Breakdown
1 total CVE
Integration for Freshsales <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Form Submission Data
Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More Release Timeline
Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More Code Analysis
SQL Query Safety
Output Escaping
Data Flow Analysis
Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More Attack Surface
AJAX Handlers 4
WordPress Hooks 16
Maintenance & Trust
Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More Maintenance & Trust
Maintenance Signals
Community Trust
Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More Alternatives
Database for Contact Form 7, WPforms, Elementor forms
contact-form-entries
Saves Contact Form 7, WPforms,Elementor Forms, CRM Perks Forms and many other contact form submissions to database.
Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms
cf7-hubspot
Send Contact Form 7, WPForms, Elementor, Ninja Forms, WPforms, Elementor, Ninja Forms, Contact Form Entries Plugin and many other contact form submiss …
Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms
cf7-salesforce
Send Contact Form 7, WPforms, Elementor, Ninja Forms, Contact Form Entries Plugin and many other contact form submissions to salesforce.
Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms
integration-for-contact-form-7-and-pipedrive
Send Contact Form 7, WPForms, Elementor, Ninja Forms, CRM Perks Forms and many other contact form submissions to Pipedrive.
Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms
cf7-constant-contact
Send Contact Form 7, WPForms, Elementor, Ninja Forms, Contact Forms Entries data and many other contact form submissions to Constant Contact.
Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More Developer Profile
10 plugins · 160 total installs
How We Detect Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.