863 matches found
CVE-2024-0710
CVE-2024-0710 漏洞：CVE-2024-0710（未认证表单提交唯一ID修改） CVSS：5.3（中危） 软件：GP Unique ID gp-unique-id 受影响版本：= 1.5.5 已修补版本：1.5.6 开发者：Gravity Wiz 研究员：Karl Emil Nikka, Nikka Systems 公开日期：2024-04-10 最后更新：2024-04-18 概述 未认证的表单提交者可以为本应始终随机或顺序值的字段选择自定义值。此漏洞仅影响那些出于法律、功能或安全原因必须保持随机或顺序值的站点。 背景 GP Unique ID 是 Gravity Form...
Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in tests/notAutotestContactServicepauseCampaign.php in the Infusionsoft Gravity Forms plugin before 1.5.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 go, 2 contactId, or 3 campaignId parameter. id: CVE-2014-45...
WordPress Gravity Forms Plugin <=3.1.0.4 - Unauthenticated Arbitrary File Upload
Gravity Forms WordPress plugin version 3.1.0.4 and earlier contains an unauthenticated arbitrary file upload vulnerability caused by bypassing extension validation in hidden file upload fields. Unauthenticated attackers can upload any file type including PHP when a form has a File Upload field...
CVE-2026-87796
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-87796 CVE-2026-87796 Multi Uploader for Gravity Forms 1.1.9 - sh1zen I am @abraxasnull. Loopback lab. The client is CVE-2026-87796-Abraxas-Labs.py. The advisory named a method. movefile is a private PHP...
CVE-2026-4406
Gravity Forms = 2.9.28 — 通过 gformgetconfig 的 formids 参数实现未认证反射型跨站脚本攻击 漏洞摘要 字段| 值 ---|--- 受影响软件| Gravity Forms（WordPress 插件） 供应商| Rocketgenius, Inc. 漏洞类型| CWE-79：网页生成期间输入未正确中和（反射型跨站脚本攻击） CWE 链| CWE-20 → CWE-116 → CWE-838 → CWE-79（参见下方 CWE 分析） 受影响版本| 已在 2.9.28（发现时最新版本）上确认；早期版本可能受影响 修复版本|...
CVE-2026-94120
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
EUVD-2026-89837
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-94120
The GravityExport Lite for Gravity Forms plugin for WordPress (versions
CVE-2026-94120 WordPress GravityExport Lite for Gravity Forms plugin <= 2.7.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-94120 WordPress GravityExport Lite for Gravity Forms plugin <= 2.7.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-48866
--- ┌───────────────────────────────────────────────────────────┐ │ │ │ C V E - 2 0 2 6 - 4 8 8 6 6 │ │ │ │ Gravity Forms Path Traversal → Arbitrary File Deletion │ │ │ └───────────────────────────────────────────────────────────┘ gformuploadedfiles はURL内で ../ を受け入れます。管理者の...
WordPress GravityExport Lite for Gravity Forms plugin <= 2.7.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ashish Agarwal @Donrulezz in WordPress Plugin GravityExport Lite for Gravity Forms versions = 2.7.2...
CVE-2026-84434
CVE-2026-84434 — Gravity Forms 未认证任意文件上传 针对 Gravity Forms 中 CVE-2026-84434 的 Python 3 PoC 扫描器与漏洞利用工具。 | ---|--- 插件| gravityforms 受影响版本| ≤ 3.1.0.4 修复版本| 3.1.0.5+ （厂商安全版本 3.1.1 ） CVSS| 9.8 （严重） 认证| 未认证 CWE| CWE-434 — 无限制上传 致谢| 0xd4rk5id3 — EnvoraSec Wordfence 概述 隐藏的 File Upload...
CVE-2026-89426
The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.6.1.0. This is due to the maybeupdateuserrole function reading the target role directly from an attacker-controlled Gravity Forms entry...
EUVD-2026-86579
The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.6.1.0. This is due to the maybeupdateuserrole function reading the target role directly from an attacker-controlled Gravity Forms entry...
CVE-2026-89426 Knit Pay <= 9.6.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms Role Field
The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.6.1.0. This is due to the maybeupdateuserrole function reading the target role directly from an attacker-controlled Gravity Forms entry...
CVE-2026-89426 Knit Pay <= 9.6.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms Role Field
The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.6.1.0. This is due to the maybeupdateuserrole function reading the target role directly from an attacker-controlled Gravity Forms entry...
CVE-2026-89426
The Knit Pay WordPress plugin (versions up to and including 9.6.1.0 ) is vulnerable to Privilege Escalation . The root cause is the maybe_update_user_role() function, which reads a target role directly from an attacker-controlled Gravity Forms entry field (via user_role_field_id) and passes it to...
PT-2026-98308
Alright, so I saw this Wordfence report from last week and honestly my jaw dropped. Nearly 50 plugins and themes dropped with active, unpatched vulnerabilities in a single week. That's not a normal week. That's a red flag waving right in our faces. And look, I get it. We all know the WordPress...
