WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gf-constant-contact
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-constant-contact
Published
2025-06-05
Title
WP Gravity Forms Constant Contact Plugin < 1.1.1 - Open Redirect
Slug
gf-constant-contact
Published
2025-08-08
Title
Gravity Forms Constant Contact < 1.1.3 - Unauthenticated PHP Object Injection
Slug
gf-custom-style
Published
2024-09-25
Title
GF Custom Style <= 2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
gf-dynamics-crm
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-dynamics-crm
Published
2025-05-07
Title
WP Gravity Forms Dynamics CRM < 1.1.5 - Open Redirect
Slug
gf-excel-import
Published
2025-01-20
Title
Import Excel to Gravity Forms < 1.18.1 - Reflected Cross-Site Scripting
Slug
gf-freshdesk
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-freshdesk
Published
2025-11-18
Title
Gravity Forms FreshDesk < 1.3.6 - Unauthenticated Open Redirect
Slug
gf-freshdesk
Published
2025-08-09
Title
Gravity Forms FreshDesk < 1.3.6 - Unauthenticated PHP Object Injection
Slug
gf-google-address-autocomplete
Published
2025-06-27
Title
Address Autocomplete via Google for Gravity Forms < 1.3.5 - CSRF
Slug
gf-hubspot
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-hubspot
Published
2025-09-26
Title
WP Gravity Forms HubSpot < 1.2.6 - Open Redirect
Slug
gf-hubspot
Published
2025-08-08
Title
Gravity Forms HubSpot < 1.2.7 - Unauthenticated PHP Object Injection
Slug
gf-infusionsoft
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-infusionsoft
Published
2025-09-22
Title
WP Gravity Forms Keap/Infusionsoft <= 1.2.4 - Open Redirect
Slug
gf-infusionsoft
Published
2025-08-08
Title
Gravity Forms Keap/Infusionsoft < 1.2.4 - Unauthenticated PHP Object Injection
Slug
gf-insightly
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-insightly
Published
2025-08-09
Title
Gravity Forms Insightly < 1.1.7 - Unauthenticated PHP Object Injection
Slug
gf-multi-uploader
Published
2025-01-16
Title
Multi Uploader for Gravity Forms < 1.1.5 - Unauthenticated Arbitrary File Upload
Slug
gf-multi-uploader
Published
2025-12-11
Title
Multi Uploader for Gravity Forms < 1.1.8 - Unauthenticated Arbitrary File Deletion
Slug
gf-salesforce-crmperks
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-salesforce-crmperks
Published
2025-06-05
Title
WP Gravity Forms Salesforce < 1.4.8 - Open Redirect
Slug
gf-salesforce-crmperks
Published
2025-08-08
Title
Gravity Forms Salesforce < 1.5.2 - Unauthenticated PHP Object Injection
Slug
gf-salesmate-add-on
Published
2025-03-31
Title
Salesmate Add-On for Gravity Forms < 2.0.4 - Missing Authorization