Gravity-Forms

Gravity Forms Unauthenticated Reflected XSS via `gform_get_config` `form_ids` Parameter (CVE-2026-4406) newCVE-2026-4406webMEDIUM 6.1Patched2026-07-05Gravity Forms Path Traversal → Arbitrary File Deletion (CVE-2026-48866) newCVE-2026-48866webCRITICAL 9.6Patched2026-07-05