Known Vulnerabilities for Gravity Forms by Gravity Forms
Listed below are 10 of the newest known vulnerabilities associated with "Gravity Forms" by "Gravity Forms".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-61955 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hannan گرویتی ف�... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-48866 json | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rocketgenius Inc. Gravity For... | Not Provided | 2026-06-01 | 2026-06-01 |
| CVE-2026-12997 json | The Gravity Forms plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.10.4 via ... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-8901 json | The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More plugin for WordPress is vulnera... | Not Provided | 2026-06-06 | 2026-06-06 |
| CVE-2026-5113 json | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Consent field hidden inputs in versio... | Not Provided | 2026-05-02 | 2026-05-04 |
| CVE-2026-5112 json | The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and inc... | Not Provided | 2026-05-02 | 2026-05-04 |
| CVE-2026-5111 json | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0. T... | Not Provided | 2026-05-02 | 2026-05-04 |
| CVE-2026-5110 json | The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and inc... | Not Provided | 2026-05-02 | 2026-05-04 |
| CVE-2026-5109 json | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0. T... | Not Provided | 2026-05-02 | 2026-05-04 |
| CVE-2026-2508 json | The Gravity Forms Booking plugin for WordPress is vulnerable to time-based SQL Injection via the ‘staff_id’ parameter in ... | Not Provided | 2026-06-25 | 2026-06-25 |