Gravity Forms vulnerabilities
We track 15 vulnerabilities in Gravity Forms products. 15 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
Latest Gravity Forms vulnerabilities
- 7.2 High severity
Gravity Forms: Improper Neutralization of Input During Web Page Generation
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via List Field in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to i
- 7.2 High severity
Gravity Forms: Improper Neutralization of Input During Web Page Generation
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Excerpt / Post Custom Field / Rich-Text Paragraph Field Values in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping.
- 9.8 Critical severity
Gravity Forms: Deserialization of Untrusted Data
The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom Field whose input type is List. This is due to GFFormsModel::create_post() passing the submitted value to WordPress' unre
- 9.8 Critical severity
Gravity Forms: Unrestricted Upload of File with Dangerous Type
The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.0.4 via the upload_file function. This is due to a mismatch between the field validation pipeline and the file persistence pipeline, where h
- 7.2 High severity
Gravity Forms: Improper Neutralization of Input During Web Page Generation
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Body Field Value in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated at
- 8.1 High severity
Gravity Forms: Unrestricted Upload of File with Dangerous Type
The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.0.2. This is due to insufficient validation of multi-file upload chunk state in the `GFAsyncUpload::upload()` function, where public form stat
- 7.5 High severity
Gravity Forms: Improper Limitation of a Pathname to a Restricted Directory
The Gravity Forms plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.10.4 via the 'gform_uploaded_files' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary
- 7.2 High severity
Gravity Forms: Improper Neutralization of Input During Web Page Generation
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Consent field hidden inputs in versions up to and including 2.10.0. This is due to a flawed state validation mechanism that fails open when input is sanitized by wp_kses(),
- 7.2 High severity
Gravity Forms: Improper Neutralization of Input During Web Page Generation
The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0. This is due to insufficient input validation and output escaping of Calculation Product field product names when rendere
- 7.2 High severity
Gravity Forms: Improper Neutralization of Input During Web Page Generation
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0. This is due to insufficient input validation and output escaping on Hidden Product field values when used inside Repeater fields, where
- 7.2 High severity
Gravity Forms: Improper Neutralization of Input During Web Page Generation
The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0. This is due to insufficient input validation and output escaping in the SingleProduct field when used inside a Repeater
- 7.2 High severity
Gravity Forms: Improper Neutralization of Input During Web Page Generation
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0. This is due to insufficient validation and output escaping of Product Option field values. The vulnerability exists because the state va
- 8.1 High severity
Gravity Forms: Unrestricted Upload of File with Dangerous Type
The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the legacy chunked upload mechanism in all versions up to, and including, 2.9.21.1. This is due to the extension blacklist not including .phar
- 9.8 Critical severity
Gravity Forms: Unrestricted Upload of File with Dangerous Type
The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the copy_post_image() function in all versions up to, and including, 2.9.20. This makes it possible for unauthenticated attackers to upload ar
- 7.2 High severity
Gravity Forms: Improper Neutralization of Input During Web Page Generation
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘alt’ parameter in all versions up to, and including, 2.9.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated att