WordPress Plugin Vulnerabilities
Gravity Forms < 3.2.2 - Unauthenticated LFI via Chunked File Upload
Description
The plugin does not properly restrict the file types that unauthenticated users can upload through its chunked file upload feature, allowing them to read server environment variables and the contents of files within the web root on servers configured to parse Server-Side Include documents, such as Apache with SSI enabled.
Proof of Concept
Affects Plugins
Fixed in 3.2.2 References
CVE
Classification
Type
LFI
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
endangcamon
Submitter
endangcamon
Submitter website
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2026-11-09 (about 2 days ago)
Added
2026-11-09 (about 1 day ago)
Last Updated
2026-11-10 (about 7 hours ago)
