Gravity Forms

WordPress plugin · gravityforms · WordPress.org ↗
3
Critical
12
High
36
Known total
0
Unfixed
Running Gravity Forms on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.
Scan a site Monitor my sites →
SeverityVulnerabilityAffectedFixed inCVEPublished
CRITICAL
CVSS 9.8
Gravity Forms [gravityforms] < 3.1.1
WPVulnerability
< 3.1.1 v3.1.1 CVE-2026-84434 Sep 4, 2026
CRITICAL
CVSS 9.6
Gravity Forms [gravityforms] < 2.10.1
WPVulnerability
< 2.10.1 v2.10.1 CVE-2026-48866 Jun 1, 2026
CRITICAL
CVSS 9.8
Gravity Forms [gravityforms] < 2.9.21
WPVulnerability
< 2.9.21 v2.9.21 CVE-2025-12352 Nov 6, 2025
HIGH
CVSS 7.2
Gravity Forms [gravityforms] < 3.0.0
WPVulnerability
< 3.0.0 v3.0.0 CVE-2026-16649 Sep 1, 2026
HIGH
CVSS 8.1
Gravity Forms [gravityforms] < 3.0.3
WPVulnerability
< 3.0.3 v3.0.3 CVE-2026-19513 Jul 15, 2026
HIGH
CVSS 7.5
Gravity Forms [gravityforms] < 2.10.5
WPVulnerability
< 2.10.5 v2.10.5 CVE-2026-12997 Jul 15, 2026
HIGH
CVSS 7.2
Gravity Forms [gravityforms] < 2.10.1
WPVulnerability
< 2.10.1 v2.10.1 CVE-2026-5110 May 1, 2026
HIGH
CVSS 7.2
Gravity Forms [gravityforms] < 2.10.1
WPVulnerability
< 2.10.1 v2.10.1 CVE-2026-5111 May 1, 2026
HIGH
CVSS 7.2
Gravity Forms [gravityforms] < 2.10.1
WPVulnerability
< 2.10.1 v2.10.1 CVE-2026-5113 May 1, 2026
HIGH
CVSS 7.2
Gravity Forms [gravityforms] < 2.10.1
WPVulnerability
< 2.10.1 v2.10.1 CVE-2026-5112 May 1, 2026
HIGH
CVSS 7.2
Gravity Forms [gravityforms] < 2.10.1
WPVulnerability
< 2.10.1 v2.10.1 CVE-2026-5109 May 1, 2026
HIGH
CVSS 8.1
Gravity Forms [gravityforms] < 2.9.22
WPVulnerability
< 2.9.22 v2.9.22 CVE-2025-12974 Nov 17, 2025
HIGH
CVSS 7.2
Gravity Forms [gravityforms] < 2.9.2
WPVulnerability
< 2.9.2 v2.9.2 CVE-2024-13377 Jan 16, 2025
HIGH
CVSS 8.3
Gravity Forms [gravityforms] < 2.7.4
WPVulnerability
< 2.7.4 v2.7.4 CVE-2023-28782 May 29, 2023
HIGH
CVSS 7.5
Gravity Forms [gravityforms] < 2.4.9
WPVulnerability
< 2.4.9 v2.4.9 CVE-2020-13764 May 8, 2019
MEDIUM
CVSS 4.7
Gravity Forms [gravityforms] < 2.9.31
WPVulnerability
< 2.9.31 v2.9.31 CVE-2026-4406 Apr 7, 2026
MEDIUM
CVSS 6.1
Gravity Forms [gravityforms] < 2.9.31
WPVulnerability
< 2.9.31 v2.9.31 CVE-2026-4394 Apr 7, 2026
MEDIUM
CVSS 6.8
Gravity Forms [gravityforms] < 2.9.23.1
WPVulnerability · PoC available
< 2.9.23.1 v2.9.23.1 CVE-2025-13407 Dec 3, 2025
MEDIUM
CVSS 5.4
Gravity Forms [gravityforms] < 2.9.2
WPVulnerability
< 2.9.2 v2.9.2 CVE-2024-13378 Jan 16, 2025
MEDIUM
CVSS 6.1
Gravity Forms [gravityforms] < 2.7.5
WPVulnerability · PoC available
< 2.7.5 v2.7.5 CVE-2023-2701 Jun 21, 2023
UNKNOWN Gravity Forms [gravityforms] < 2.9.29
WPVulnerability
< 2.9.29 v2.9.29 CVE-2026-3492 Mar 10, 2026
UNKNOWN Gravity Forms [gravityforms] < 2.0.7
WPVulnerability
< 2.0.7 v2.0.7 Oct 13, 2023
UNKNOWN Gravity Forms [gravityforms] < 1.8.20
WPVulnerability
< 1.8.20 v1.8.20 Jun 17, 2023
UNKNOWN Gravity Forms [gravityforms] < 1.9.7
WPVulnerability
< 1.9.7 v1.9.7 Apr 20, 2023
UNKNOWN Gravity Forms [gravityforms] < 1.9.3.6
WPVulnerability
< 1.9.3.6 v1.9.3.6 Mar 17, 2023
UNKNOWN Gravity Forms [gravityforms] < 1.9.16
WPVulnerability
< 1.9.16 v1.9.16 Mar 1, 2023
UNKNOWN Gravity Forms [gravityforms] < 2.0.7
WPVulnerability
< 2.0.7 v2.0.7 Sep 7, 2016
UNKNOWN Gravity Forms [gravityforms] < 1.9.16
WPVulnerability
< 1.9.16 v1.9.16 Mar 1, 2016
UNKNOWN Gravity Forms [gravityforms] < 1.9.7
WPVulnerability
< 1.9.7 v1.9.7 Apr 20, 2015
UNKNOWN Gravity Forms [gravityforms] >= 1.8 - <= 1.9.3.5
WPVulnerability
>= 1.8, <= 1.9.3.5 patched CVE-2015-2260 Mar 17, 2015
UNKNOWN Gravity Forms [gravityforms] < 1.8.20
WPVulnerability
< 1.8.20 v1.8.20 Feb 26, 2015
UNKNOWN Gravity Forms [gravityforms] < 1.9.3.6
WPVulnerability
< 1.9.3.6 v1.9.3.6
UNKNOWN Gravity Forms [gravityforms] < 1.9.7
WPVulnerability
< 1.9.7 v1.9.7
UNKNOWN Gravity Forms [gravityforms] < 1.9.16
WPVulnerability
< 1.9.16 v1.9.16
UNKNOWN Gravity Forms [gravityforms] < 2.0.7
WPVulnerability
< 2.0.7 v2.0.7
UNKNOWN Gravity Forms [gravityforms] < 1.8.20
WPVulnerability
< 1.8.20 v1.8.20

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.