Gravity Forms vulnerabilities

2 known vulnerabilities in Gravity Forms from RocketGenius. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Gravity Forms: Deserialization of Untrusted Data

  CVE-2026-97296Oct 16, 2026RocketGenius

  Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1.

• 9.6 Critical severity

  Gravity Forms: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-48866Jun 1, 2026RocketGenius

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rocketgenius Inc. Gravity Forms allows Path Traversal. This issue affects Gravity Forms: from n/a through 2.10.0.1.