GravityKit vulnerabilities
Published CVEs affecting GravityKit products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-94120
High · 7.5
CWE-862 Sep 30, 2026
WordPress GravityExport Lite for Gravity Forms plugin <= 2.7.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms <= 2.7.2 versions.
CVE-2026-57665
Medium · 5.3
CWE-639 Jun 26, 2026
WordPress GravityView plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in GravityView <= 3.0.0 versions.