911 matches found
CVE-2026-87796
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-87796 CVE-2026-87796 Multi Uploader for Gravity Forms 1.1.9 - sh1zen I am @abraxasnull. Loopback lab. The client is CVE-2026-87796-Abraxas-Labs.py. The advisory named a method. movefile is a private PHP...
CVE-2024-0710
CVE-2024-0710 Vulnerability: CVE-2024-0710 Unauthenticated Form Submission Unique ID Modification CVSS: 5.3 Medium Software: GP Unique ID gp-unique-id Affected versions: = 1.5.5 Patched version: 1.5.6 Developer: Gravity Wiz Researcher: Karl Emil Nikka, Nikka Systems Publicly published: 2024-04-10...
CVE-2026-48866
┌───────────────────────────────────────────────────────────┐ │ │ │ C V E - 2 0 2 6 - 4 8 8 6 6 │ │ │ │ Gravity Forms Path Traversal → Arbitrary File D...
Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in tests/notAutotestContactServicepauseCampaign.php in the Infusionsoft Gravity Forms plugin before 1.5.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 go, 2 contactId, or 3 campaignId parameter. id: CVE-2014-45...
WordPress Gravity Forms Plugin <=3.1.0.4 - Unauthenticated Arbitrary File Upload
Gravity Forms WordPress plugin version 3.1.0.4 and earlier contains an unauthenticated arbitrary file upload vulnerability caused by bypassing extension validation in hidden file upload fields. Unauthenticated attackers can upload any file type including PHP when a form has a File Upload field...
CVE-2026-110884
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in geekontheroad Live Summary for Gravity Forms live-summary-for-gravity-forms allows Reflected XSS.This issue affects Live Summary for Gravity Forms: from n/a through 1.2.10...
EUVD-2026-107156
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in geekontheroad Live Summary for Gravity Forms live-summary-for-gravity-forms allows Reflected XSS.This issue affects Live Summary for Gravity Forms: from n/a through 1.2.10...
CVE-2026-110884 WordPress Live Summary for Gravity Forms plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in geekontheroad Live Summary for Gravity Forms live-summary-for-gravity-forms allows Reflected XSS.This issue affects Live Summary for Gravity Forms: from n/a through 1.2.10...
CVE-2026-110884
The Live Summary for Gravity Forms WordPress plugin (versions
CVE-2026-110884 WordPress Live Summary for Gravity Forms plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in geekontheroad Live Summary for Gravity Forms live-summary-for-gravity-forms allows Reflected XSS.This issue affects Live Summary for Gravity Forms: from n/a through 1.2.10...
CVE-2026-4406
Gravity Forms = 2.9.28 — Unauthenticated Reflected Cross-Site Scripting via gformgetconfig formids Parameter Vulnerability Summary Field| Value ---|--- Affected Software| Gravity Forms WordPress Plugin Vendor| Rocketgenius, Inc. Vulnerability Type| CWE-79: Improper Neutralization of Input During...
PT-2026-120513
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in geekontheroad Live Summary for Gravity Forms live-summary-for-gravity-forms allows Reflected XSS.This issue affects Live Summary for Gravity Forms: from n/a through 1.2.10...
WordPress Live Summary for Gravity Forms plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by John Ryan Albon in WordPress Plugin Live Summary for Gravity Forms versions = 1.2.10...
CVE-2026-84434
CVE-2026-84434 — Gravity Forms Unauthenticated Arbitrary File Upload Python 3 PoC scanner and exploit for CVE-2026-84434 in Gravity Forms. | ---|--- Plugin| gravityforms Affected| ≤ 3.1.0.4 Fixed in| 3.1.0.5+ vendor security release 3.1.1 CVSS| 9.8 Critical Auth| Unauthenticated CWE| CWE-434 —...
CVE-2026-97296
Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1...
CVE-2026-97296 WordPress Gravity Forms plugin < 3.1.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1...
CVE-2026-97296
The Rocketgenius, Inc Gravity Forms WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data in the gravityforms component. This vulnerability affects versions prior to 3.1.1 . Successful exploitation could result in high impact across confidentiality, i...
EUVD-2026-102810
Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1...
PT-2026-115523
Name of the Vulnerable Software and Affected Versions Gravity Forms versions prior to 3.1.1 Description Rocketgenius, Inc Gravity Forms is subject to a deserialization of untrusted data issue that allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of a...