[■] Plugin de WordPress

Gravity Forms

30 expedientes en el radar

Comprueba tu versión de Gravity Forms Sólo las que se están explotando

[■] Registro

Vulnerabilidades (30)

7,2 Alta

CVE-2026-90437: cross-site scripting (XSS) en Gravity Forms

CVE-2026-90437

T−16d 29 oct. 2026
9,8 Crít.

CVE-2026-103039: deserialización de datos no fiables en Gravity Forms

CVE-2026-103039

T−16d 29 oct. 2026
7,2 Alta

CVE-2026-97645: cross-site scripting (XSS) en Gravity Forms

CVE-2026-97645

T−16d 29 oct. 2026
8,1 Alta

CVE-2026-97296: deserialización de datos no fiables en Gravity Forms

CVE-2026-97296

T−31d 14 oct. 2026
9,8 Crít.

CVE-2026-84434: subida de ficheros peligrosos en Gravity Forms

CVE-2026-84434

T−56d 19 sept. 2026
7,2 Alta

CVE-2026-16649: cross-site scripting (XSS) en Gravity Forms

CVE-2026-16649

T−71d 4 sept. 2026
8,1 Alta

CVE-2026-19513: subida de ficheros peligrosos en Gravity Forms

CVE-2026-19513

T−74d 1 sept. 2026
7,5 Alta

CVE-2026-12997: recorrido de rutas (path traversal) en Gravity Forms

CVE-2026-12997

T−122d 15 jul. 2026
9,1 Crít.

CVE-2026-48866: recorrido de rutas (path traversal) en Gravity Forms

CVE-2026-48866

T−166d 1 jun. 2026
7,2 Alta

CVE-2026-5113: cross-site scripting (XSS) en Gravity Forms

CVE-2026-5113

T−197d 1 may. 2026
7,2 Alta

CVE-2026-5110: cross-site scripting (XSS) en Gravity Forms

CVE-2026-5110

T−197d 1 may. 2026
7,2 Alta

CVE-2026-5112: cross-site scripting (XSS) en Gravity Forms

CVE-2026-5112

T−197d 1 may. 2026
7,2 Alta

CVE-2026-5111: cross-site scripting (XSS) en Gravity Forms

CVE-2026-5111

T−197d 1 may. 2026
7,2 Alta

CVE-2026-5109: cross-site scripting (XSS) en Gravity Forms

CVE-2026-5109

T−197d 1 may. 2026
6,1 Media

CVE-2026-4394: cross-site scripting (XSS) en Gravity Forms

CVE-2026-4394

T−221d 7 abr. 2026
4,7 Media

CVE-2026-4406: cross-site scripting (XSS) en Gravity Forms

CVE-2026-4406

T−221d 7 abr. 2026
6,4 Media

CVE-2026-3492: cross-site scripting (XSS) en Gravity Forms

CVE-2026-3492

T−248d 10 mar. 2026
9,8 Crít.

CVE-2025-13407: subida de ficheros peligrosos en Gravity Forms

CVE-2025-13407

T−346d 3 dic. 2025
8,1 Alta

CVE-2025-12974: subida de ficheros peligrosos en Gravity Forms

CVE-2025-12974

T−362d 17 nov. 2025
9,8 Crít.

CVE-2025-12352: subida de ficheros peligrosos en Gravity Forms

CVE-2025-12352

T−373d 6 nov. 2025
7,2 Alta

CVE-2024-13377: cross-site scripting (XSS) en Gravity Forms

CVE-2024-13377

T−667d 16 ene. 2025
5,4 Media

CVE-2024-13378: cross-site scripting (XSS) en Gravity Forms

CVE-2024-13378

T−667d 16 ene. 2025
6,1 Media

CVE-2023-2701: cross-site scripting (XSS) en Gravity Forms

CVE-2023-2701

T−1242d 21 jun. 2023
9,8 Crít.

CVE-2023-28782: deserialización de datos no fiables en Gravity Forms

CVE-2023-28782

T−1265d 29 may. 2023
7,5 Alta

CVE-2020-13764: exposición de información sensible en wp-premium/gravityforms y Gravity Forms

CVE-2020-13764 · GHSA-M983-Q76G-CWPQ

T−2747d 8 may. 2019
5,4 Media

Cross-site scripting (XSS) en Gravity Forms

T−3720d 7 sept. 2016
4,7 Media

Cross-site scripting (XSS) en Gravity Forms

T−3910d 1 mar. 2016
5,4 Media

Cross-site scripting (XSS) en Gravity Forms

T−4226d 20 abr. 2015
9,1 Crít.

CVE-2015-2260: inyección SQL en Gravity Forms

CVE-2015-2260

T−4260d 17 mar. 2015
9,8 Crít.

Subida de ficheros peligrosos en Gravity Forms

T−4279d 26 feb. 2015