Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms
Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 6 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (17%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data.
Every one of the 6 issues recorded for Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms has a vendor fix available, so running the current release closes all known holes.
6 independent researchers contributed these findings, one record each. Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-49763Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.3.7 - Unauthenticated PHP Object Injection
Read the full analysisVulnerability Records

Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms
Author
CRM Perks
Contact Form 7 hubspot Plugin sends form submissions from Contact Form 7, WPforms, Elementor Forms, Ninja Forms, Formidable Forms, Contact Form Entries and many other popular contact form plugins to HubSpot CRM. Learn more at crmperks.com Unlock Powerful HubSpot Integration with Our Enhanced Features We’ve added a host of new features to our WordPress HubSpot integration, making it more powerful and versatile than ever. Seamless Support for All HubSpot Objects Effortlessly create and manage any HubSpot object, including Contacts, Companies, Tasks, Tickets, Deals, Leads, Carts, Orders, Invoices, Listings, Services, Courses, and even Custom Objects. Easily associate objects with one another for example, linking a contact to a lead, ticket, or invoice with just a few clicks. Transform Your WordPress Forms into Genuine HubSpot Forms With our enhanced form mapping feature, you can seamlessly submit WordPress forms as authentic HubSpot online forms. Simply create a feed, map your HubSpot form fields to your WordPress form fields, and let the plugin handle the rest. Plus, track user web activity directly in HubSpot for deeper insights. How to Setup Go to “HubSpot Accounts” tab and add new account. Go to “HubSpot Feeds” tab , create new feed. Map required HubSpot fields to contact form fields. Send your test entry to HubSpot. Go to “HubSpot Logs” tab and verify, if entry was sent to HubSpot. Connect hubspot account Connect any contact form 7 to hubspot account by safe and secure Oauth 2.0 or your Private Hubspot App. You can user your own hubspot app with oauth 2.0 Map hubspot fields Simply select hubspot object(contact,ticket etc) then Map any contact form 7 fields to hubspot object fields. No limitation on number of fields. You can map unlimited fields. Filter contact form 7 submissions Send all contact form 7 submissions to HubSpot or filter form submissions sent to HubSpot based on user input. For example , send only those entries to HubSpot which have work email address. Manually send to hubspot Send contact form 7 submissions to hubspot when any user submits form. Later you can manually send contact form 7 submissions to hubspot. hubspot logs View a detailed log of each contact form 7 submission whether sent (or not sent) to hubspot and easily resend contact form 7 submission to hubspot. Send Data As hubspot object Notes Sometimes you can not map all contact form fields to HubSpot Object fields. Send extra contact form fields as hubspot object notes. Create Or Update Contact in HubSpot If an Object(Contact, Company etc) already exists in hubspot , update it otherwise create a new Object in HubSpot. Why we built this plugin Contact Form 7 and some other popular contact forms are good but you can not send contact form submissions to any crm including hubspot. You can send contact form(contact form 7) submissions to hubspot with this free plugin. Premium Version Features. Following features are available in Premium version only. Contact Form 7 HubSpot Pro. Custom fields, file attachments, custom lists and Phone Number fields. HubSpot Custom fields and custom objects. Add HubSpot Contact to Deal, Lead, Order, Invoice, Ticket, Task, Company. Contact Lists and Workflows of HubSpot CRM. Assign Pipeline and stage to any Hubspot Object. Assign a Company to Contact, Order, Ticket, Task. Update deals and tickets in HubSpot. Track gclid, utm parameters and geolocation when anyone submits a form. Lookup customers’s email and phone number using popular email and phone lookup services. 20+ premium addons Upgrade to Contact Form 7 Hubspot Pro Want to send data to other crm We have Premium Extensions for 20+ CRMs.View All CRM Extensions Need HubSpot Plugin for Woocommerce or Gravity Forms ? Woocommerce HubSpot Plugin Gravity Forms HubSpot
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C