WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gratisfaction-all-in-one-loyalty-contests-referral-program-for-woocommerce
Published
2024-03-25
Title
Gratisfaction < 4.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gravatarlocalcache
Published
2025-01-16
Title
GravatarLocalCache <= 1.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
gravitate-automated-tester
Published
2025-09-22
Title
Gravitate Automated Tester <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
gravitate-qa-tracker
Published
2017-04-27
Title
Gravitate QA Tracker <= 1.2.1 - Unauthenticated PHP Object Injection
Slug
gravitec-net-web-push-notifications
Published
2025-12-06
Title
Gravitec.net – Web Push Notifications < 2.9.18 - Missing Authorization
Slug
gravity-file-ajax-upload-free
Published
2014-08-01
Title
Gravity Upload Ajax <= 1.1 - Arbitrary File Upload
Slug
gravity-forms-css-themes-with-fontawesome-and-placeholder-support
Published
2025-04-17
Title
Gravity Forms CSS Themes with Fontawesome and Placeholders <= 8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
gravity-forms-icontact
Published
2026-02-05
Title
iContact for Gravity Forms <= 1.3.2 - Reflected Cross-Site Scripting
Slug
gravity-forms-multiple-form-instances
Published
2024-07-09
Title
Gravity Forms: Multiple Form Instances < 1.1.2 - Unauthenticated Full Path Disclosure
Slug
gravity-forms-pdf-extended
Published
2022-06-14
Title
Gravity PDF < 6.3.1 - Reflected Cross-Site Scripting
Slug
gravity-forms-sms-notifications
Published
2017-12-14
Title
Multiple Mediaburst/Clockwork Plugins - Cross-Site Scripting (XSS)
Slug
gravity-forms-sticky-list
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
gravity-forms-sticky-list
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
gravity-forms-sticky-list
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
gravity-forms-toolbar
Published
2024-09-30
Title
Gravity Forms Toolbar <= 1.7.0 - Reflected Cross-Site Scripting
Slug
gravity-signature-forms-add-on
Published
2025-12-31
Title
Signature Add-On for Gravity Forms < 1.8.7 - Missing Authorization
Slug
gravityforms
Published
2014-12-08
Title
Gravity Forms <= 1.8.19 - Arbitrary File Upload
Slug
gravityforms
Published
2015-03-17
Title
Gravity Forms 1.8 <= 1.9.3.5 - Authenticated Blind SQL Injection
Slug
gravityforms
Published
2015-04-20
Title
Gravity Forms <= 1.9.6 - Cross-Site Scripting (XSS)
Slug
gravityforms
Published
2016-03-01
Title
Gravity Forms < 1.9.16 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
gravityforms
Published
2016-10-13
Title
Gravity Forms < 2.0.7 - Authenticated Blind Cross-Site Scripting (XSS)
Slug
gravityforms
Published
2019-05-08
Title
GravityForms < 2.4.9 - Hashed Password Leakage
Slug
gravityforms
Published
2023-05-29
Title
Gravity Forms < 2.7.4 - Unauthenticated PHP Object Injection
Slug
gravityforms
Published
2023-06-21
Title
Gravity Forms < 2.7.5 - Reflected XSS
Slug
gravityforms
Published
2025-01-16
Title
GravityForms 2.9.0.1 - 2.9.1.3 - Unauthenticated Stored Cross-Site Scripting via 'style_settings' parameter