WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gf-freshdesk
Published
2025-11-18
Title
Gravity Forms FreshDesk < 1.3.6 - Unauthenticated Open Redirect
Slug
gf-freshdesk
Published
2025-08-09
Title
Gravity Forms FreshDesk < 1.3.6 - Unauthenticated PHP Object Injection
Slug
gf-google-address-autocomplete
Published
2025-06-27
Title
Address Autocomplete via Google for Gravity Forms < 1.3.5 - CSRF
Slug
gf-hubspot
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-hubspot
Published
2025-09-26
Title
WP Gravity Forms HubSpot < 1.2.6 - Open Redirect
Slug
gf-hubspot
Published
2025-08-08
Title
Gravity Forms HubSpot < 1.2.7 - Unauthenticated PHP Object Injection
Slug
gf-infusionsoft
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-infusionsoft
Published
2025-09-22
Title
WP Gravity Forms Keap/Infusionsoft < 1.2.7 - Open Redirect
Slug
gf-infusionsoft
Published
2025-08-08
Title
Gravity Forms Keap/Infusionsoft < 1.2.4 - Unauthenticated PHP Object Injection
Slug
gf-insightly
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-insightly
Published
2025-08-09
Title
Gravity Forms Insightly < 1.1.7 - Unauthenticated PHP Object Injection
Slug
gf-multi-uploader
Published
2025-01-16
Title
Multi Uploader for Gravity Forms < 1.1.5 - Unauthenticated Arbitrary File Upload
Slug
gf-multi-uploader
Published
2025-12-11
Title
Multi Uploader for Gravity Forms < 1.1.8 - Unauthenticated Arbitrary File Deletion
Slug
gf-salesforce-crmperks
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-salesforce-crmperks
Published
2025-06-05
Title
WP Gravity Forms Salesforce < 1.4.8 - Open Redirect
Slug
gf-salesforce-crmperks
Published
2025-08-08
Title
Gravity Forms Salesforce < 1.5.2 - Unauthenticated PHP Object Injection
Slug
gf-salesmate-add-on
Published
2025-03-31
Title
Salesmate Add-On for Gravity Forms < 2.0.4 - Missing Authorization
Slug
gf-salesmate-add-on
Published
2025-03-31
Title
Salesmate Add-On for Gravity Forms < 2.0.4 - Unauthenticated SQL Injection
Slug
gf-zendesk
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-zendesk
Published
2025-05-07
Title
WP Gravity Forms Zendesk < 1.1.3 - Open Redirect
Slug
gf-zoho
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-zoho
Published
2025-10-21
Title
WP Gravity Forms Zoho CRM and Bigin < 1.2.9 - Open Redirect
Slug
gf-zoho
Published
2025-08-08
Title
Gravity Forms Zoho CRM and Bigin < 1.3.0 - Unauthenticated PHP Object Injection
Slug
gf2pdf
Published
2025-03-23
Title
Gravity 2 PDF <= 3.1.3 - Reflected Cross-Site Scripting
Slug
gfirem-action-after
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius