[ Vendor · 3 CVEs ]
Gravity Forms
CVEs affecting Gravity Forms published in the last 30 days, plus any Gravity Forms CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97645 | 30 Oct 2026 | CVSS 7.2 | Gravity FormsThe Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via List Field in all versions up to, and including, 3.1.2 due to… | |
| CVE-2026-90437 | 30 Oct 2026 | CVSS 7.2 | Gravity FormsThe Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Excerpt / Post Custom Field / Rich-Text Paragraph Field… | |
| CVE-2026-103039 | 30 Oct 2026 | CVSS 9.8 | Gravity FormsThe Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom Field… |