RocketGenius vulnerabilities
We track 4 vulnerabilities in RocketGenius products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
Latest RocketGenius vulnerabilities
- 8.1 High severity
Gravity Forms: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1.
- 9.6 Critical severity
Gravity Forms: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rocketgenius Inc. Gravity Forms allows Path Traversal. This issue affects Gravity Forms: from n/a through 2.10.0.1.
- 7.1 High severity
Gravity SMTP: Missing Authorization
The Gravity SMTP plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated atta
- 7.5 High severity
Gravity SMTP: Exposure of Sensitive Information to an Unauthorized Actor
The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4. This is due to a REST API endpoint registered at /wp-json/gravitysmtp/v1/tests/mock-data with a permission_callback that uncondit