CVE-2025-60091
Critical · 9.8CVSS
9.8
EPSS
0.5%
Published
Dec 18, 2025
CISA due date
—
The record
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Object Injection.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through <= 1.2.9.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|