CVE Intelligence

RocketGenius Gravity Forms vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting RocketGenius Gravity Forms: 1 record(s), with affected versions and fixes.

CVE-2026-48866 Critical · 9.6 CWE-22 Jun 1, 2026
WordPress Gravity Forms plugin <= 2.10.0.1 - Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rocketgenius Inc. Gravity Forms allows Path Traversal. This issue affects Gravity Forms: from n/a through 2.10.0.1.