gravityforms vulnerabilities

CVEs whose affected-version data names the gravityforms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-97296High· 8.1

Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1.

Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1.

▾ TwilightRocketgenius, Inc · gravityformsEPSS 0.25%via NVD

gravityforms vulnerabilities (CVEs) · VulnSea