Pricing
Case studies
Login
Start trial
Gravity Forms
N/A
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
WordPress Plugin
No VDP
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
0 present
10 fixed
5 Mitigation rules
Unauthenticated Arbitrary File Upload via Legacy Chunked Upload vulnerability
<= 2.9.21.1
Nov 17, 2025
Unauthenticated Arbitrary File Upload via 'copy_post_image' vulnerability
<= 2.9.20
Nov 7, 2025
Unauthenticated Stored Cross-Site Scripting via 'alt' parameter vulnerability
<= 2.9.1.3
Jan 16, 2025
Reflected XSS vulnerability
< 2.7.5
Jun 26, 2023
Unauthenticated PHP Object Injection vulnerability
<= 2.7.3
May 29, 2023
XSS
<= 2.0.6.5
Oct 13, 2016
Arbitrary File Upload
<= 1.8.19
Jun 17, 2016
Authenticated Reflected XSS
<= 1.9.15.11
Mar 1, 2016
Cross Site Scripting
<= 1.9.6
Apr 20, 2015
SQL Injection
<= 1.9.3.5
Mar 17, 2015