EUVD-2026-33650

🗓️ 01 Jun 2026 14:39:47Reported by EUVDType

Path traversal vulnerability in Gravity Forms allows access to restricted directories.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2026-48866	5 Jun 202614:00	–	circl
CNNVD	WordPress plugin Gravity Forms 路径遍历漏洞	1 Jun 202600:00	–	cnnvd
CVE	CVE-2026-48866	1 Jun 202614:39	–	cve
Cvelist	CVE-2026-48866 WordPress Gravity Forms plugin <= 2.10.0.1 - Arbitrary File Deletion vulnerability	1 Jun 202614:39	–	cvelist
GithubExploit	Exploit for CVE-2026-48866	5 Jun 202613:38	–	githubexploit
NVD	CVE-2026-48866	1 Jun 202615:16	–	nvd
Packet Storm	📄 WordPress Gravity Forms 2.10.0.1 File Deletion / Path Traversal	12 Jun 202600:00	–	packetstorm
Patchstack	WordPress Gravity Forms plugin <= 2.10.0.1 - Arbitrary File Deletion vulnerability	1 Jun 202613:42	–	patchstack
Positive Technologies	PT-2026-45440	1 Jun 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-48866	5 Jun 202619:13	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "6323997e-15d7-3ce0-ae65-d1c41c8c6684",
        "vendor": {
          "name": "Rocketgenius Inc."
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "8941492e-602b-3e5a-b90f-0f436baa53f7",
        "product": {
          "name": "Gravity Forms",
          "vendor": {
            "name": "Gravity Forms"
          }
        },
        "product_version": "n/a ≤2.10.0.1"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/wordpress/plugin/gravityforms/vulnerability/wordpress-gravity-forms-plugin-2-10-0-1-arbitrary-file-deletion-vulnerability

01 Jun 2026 16:19Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.6

EPSS0.005

SSVC