WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gf-infusionsoft
Published
2025-08-08
Title
Gravity Forms Keap/Infusionsoft < 1.2.4 - Unauthenticated PHP Object Injection
Slug
gf-insightly
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-insightly
Published
2025-08-09
Title
Gravity Forms Insightly < 1.1.7 - Unauthenticated PHP Object Injection
Slug
gf-multi-uploader
Published
2025-01-16
Title
Multi Uploader for Gravity Forms < 1.1.5 - Unauthenticated Arbitrary File Upload
Slug
gf-multi-uploader
Published
2025-12-11
Title
Multi Uploader for Gravity Forms < 1.1.8 - Unauthenticated Arbitrary File Deletion
Slug
gf-salesforce-crmperks
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-salesforce-crmperks
Published
2025-06-05
Title
WP Gravity Forms Salesforce < 1.4.8 - Open Redirect
Slug
gf-salesforce-crmperks
Published
2025-08-08
Title
Gravity Forms Salesforce < 1.5.2 - Unauthenticated PHP Object Injection
Slug
gf-salesmate-add-on
Published
2025-03-31
Title
Salesmate Add-On for Gravity Forms < 2.0.4 - Missing Authorization
Slug
gf-salesmate-add-on
Published
2025-03-31
Title
Salesmate Add-On for Gravity Forms < 2.0.4 - Unauthenticated SQL Injection
Slug
gf-zendesk
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-zendesk
Published
2025-05-07
Title
WP Gravity Forms Zendesk < 1.1.3 - Open Redirect
Slug
gf-zoho
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-zoho
Published
2025-10-21
Title
WP Gravity Forms Zoho CRM and Bigin < 1.2.9 - Open Redirect
Slug
gf-zoho
Published
2025-08-08
Title
Gravity Forms Zoho CRM and Bigin < 1.3.0 - Unauthenticated PHP Object Injection
Slug
gf2pdf
Published
2025-03-23
Title
Gravity 2 PDF <= 3.1.3 - Reflected Cross-Site Scripting
Slug
gfirem-action-after
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
gfirem-action-after
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
gfirem-advance-search
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
gfirem-advance-search
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
gfirem-advance-search
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
gfirem-fields
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
gfirem-fields
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
gfirem-fields
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
gg-bought-together
Published
2025-06-24
Title
GG Bought Together for WooCommerce <= 1.0.2 - Unauthenticated SQL Injection