What’s Vulnerable › Vulnerabilities

CVE-2023-38481: WordPress Integration for WooCommerce and Zoho CRM Plugin < 1.3.7 is vulnerable to Open Redirection

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-19 · updated 2026-06-17
• Weakness: CWE-601

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin.This issue affects Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin: from n/a before 1.3.7.

Affected products

• CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin: before 1.3.7 — fixed in 1.3.7

How to fix

Upgrade to a fixed version: CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin 1.3.7. Check the vendor advisory for mitigations.

References

• https://patchstack.com/database/vulnerability/woo-zoho/wordpress-integration-for-woocommerce-and-zoho-crm-plugin-1-3-7-open-redirection-vulnerability?_s_id=cve
• https://patchstack.com/database/vulnerability/woo-zoho/wordpress-integration-for-woocommerce-and-zoho-crm-plugin-1-3-7-open-redirection-vulnerability?_s_id=cve

Get alerted when CVE-2023-38481 or the next vulnerability affects your stack