WordPress Gravity Theme <= 1.3.0 is vulnerable to Local File Inclusion

Software Gravity Type Theme Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 627b942c8e0e Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

Malicious code in cordelia-quasar-gravity-commitlint-config-angular (npm)

The package cordelia-quasar-gravity-commitlint-config-angular was found to contain malicious code...

Malicious code in gravity-jest-orbit-dione (npm)

The package gravity-jest-orbit-dione was found to contain malicious code...

Malicious code in gravity-optimize-css-assets-webpack-plugin-selenium-rollup-plugin (npm)

The package gravity-optimize-css-assets-webpack-plugin-selenium-rollup-plugin was found to contain malicious code...

Malicious code in warp-gravity-quark-nashira (npm)

The package warp-gravity-quark-nashira was found to contain malicious code...

MAL-2025-45606 Malicious code in prompts-gravity-schema-mensa (npm)

The package prompts-gravity-schema-mensa was found to contain malicious code...

MAL-2025-43895 Malicious code in cordelia-quasar-gravity-commitlint-config-angular (npm)

The package cordelia-quasar-gravity-commitlint-config-angular was found to contain malicious code...

MAL-2025-44466 Malicious code in gravity-optimize-css-assets-webpack-plugin-selenium-rollup-plugin (npm)

The package gravity-optimize-css-assets-webpack-plugin-selenium-rollup-plugin was found to contain malicious code...

MAL-2025-45573 Malicious code in polaris-gravity-nightwatch-spinner (npm)

The package polaris-gravity-nightwatch-spinner was found to contain malicious code...

Malicious code in element-ui-cryptography-gravity-quito (npm)

The package element-ui-cryptography-gravity-quito was found to contain malicious code...

Malicious code in polaris-gravity-nightwatch-spinner (npm)

The package polaris-gravity-nightwatch-spinner was found to contain malicious code...

MAL-2025-44127 Malicious code in element-ui-cryptography-gravity-quito (npm)

The package element-ui-cryptography-gravity-quito was found to contain malicious code...

MAL-2025-44464 Malicious code in gravity-exec-geochemistry-jwt (npm)

The package gravity-exec-geochemistry-jwt was found to contain malicious code...

MAL-2025-46556 Malicious code in warp-gravity-quark-nashira (npm)

The package warp-gravity-quark-nashira was found to contain malicious code...

Malicious code in gravity-exec-geochemistry-jwt (npm)

The package gravity-exec-geochemistry-jwt was found to contain malicious code...

Malicious code in prompts-gravity-schema-mensa (npm)

The package prompts-gravity-schema-mensa was found to contain malicious code...

MAL-2025-46255 Malicious code in terser-webpack-plugin-polaris-grus-gravity (npm)

The package terser-webpack-plugin-polaris-grus-gravity was found to contain malicious code...

MAL-2025-44465 Malicious code in gravity-jest-orbit-dione (npm)

The package gravity-jest-orbit-dione was found to contain malicious code...

WordPress PDF for Gravity Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin PDF for Gravity Forms + Drag And Drop Template Builder versions = 6.5.0...

CVE-2025-54681

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Phishing.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through = 1.2.4...