CVE-2026-119529

The Gravity Forms WordPress plugin (versions before 3.2.2 ) is vulnerable to an unauthenticated Local File Inclusion (LFI) via its chunked file upload feature. The flaw stems from inadequate restriction on file types, which allows attackers to upload files that can be parsed by Server-Side Includ...