tag
Gravity-Forms
Medium
Gravity Forms Unauthenticated Reflected XSS via `gform_get_config` `form_ids` Parameter (CVE-2026-4406)
CVE-2026-4406·
Gravity Forms (WordPress plugin) by Rocketgenius, Inc.
patched
Critical
Gravity Forms Path Traversal → Arbitrary File Deletion (CVE-2026-48866)
CVE-2026-48866·
Gravity Forms plugin for WordPress
patched