WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms

WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 2 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Deserialization Of Untrusted Data.

Every one of the 4 issues recorded for WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.1CVE-2026-49105

WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 - Unauthenticated PHP Object Injection

Read the full analysis

Vulnerability Records

4 records
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms banner
Latestv1.1.8

WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms

CRM Perks

Author

CRM Perks

5.0(13)
100/100
Last Updated
2026-09-06 (7d ago)
Active Installs
400+
Downloads
15,684
Requires WP
3.8+
Requires PHP
5.3+
Tested up to
WP 7.1
Created
2018-10-12 (8y ago)

Contact Form 7 Zendesk Plugin sends form submissions from Contact Form 7, WPforms, Elementor Forms, Ninja Forms, Formidable Forms, Contact Form Entries and many other popular contact form plugins to zendesk when anyone submits a contact form. Learn more at crmperks.com How to Setup Go to “Zendesk Accounts” tab then add new account. Go to “Zendesk Feeds” tab then create new feed. Map required Zendesk fields to contact form fields. Send your test entry to Zendesk. Go to “Zendesk Logs” tab and verify, if entry was sent to Zendesk. Connect Zendesk account Connect any contact form 7 to zendesk account by simply entering zendesk API key. Additionally , you can connect multiple zendesk accounts. Map Zendesk ticket fields Map any contact form 7 form fields to zendsk ticket fields. Also you can map unlimited Zendesk ticket fields. Filter contact form 7 submissions Filter contact form 7 submissions sent to zendesk based on user input. For example , sending only those entries to zendesk which contain work email address. Manually send to Zendesk Send contact form 7 submissions to zendesk when someone submits a form. Later you can manually send contact form submissions to zendesk. Zendesk logs View a detailed log of each contact form 7 submission whether sent or not sent to Zendesk and easily resend contact form 7 submission to Zendesk. Send Data As Zendesk ticket Notes Send one to many contact form 7 fields as zendesk ticket notes. Zendesk Ticket Status and Priority Set zendesk ticket status and priority when posting contact form 7 submission to zendesk. Why we built this plugin Contact Form 7 and some other popular contact forms are good but you can not send contact form submissions to any crm including zendesk. You can send to any contact form(contact form 7) submissions to zendesk with this free plugin. Premium Version Features. Following features are available in pro version only. Contact Form Zendesk Pro. Zendesk tickets tags. Zendesk Custom field. Zendesk Phone Number field. Assign tickets to any user. Zendesk tickets attachments. Google Analytics Parameters and Geolocation of a visitor who submitted the form. Lookup lead’s email and phone number using email and phone lookup apis. 20+ premium addons Want to send data to crm We have Premium Extensions for 20+ CRMs.View All CRM Extensions

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C