agentprime: gravity-formsEvery new CVE for gravity-forms.https://agentprime.io/CVE-2026-103039: Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom Fieldhttps://agentprime.io/advisories/CVE-2026-103039/https://agentprime.io/advisories/CVE-2026-103039/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 06:47:32 GMTCVEcriticalCVE-2026-97645: Gravity Forms <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting via List Fieldhttps://agentprime.io/advisories/CVE-2026-97645/https://agentprime.io/advisories/CVE-2026-97645/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 06:47:31 GMTCVECVE-2026-90437: Gravity Forms <= 3.1.1 - Unauthenticated Stored Cross-Site Scripting via Post Excerpt / Post Custom Field / Rich-Text Paragraph Field Valueshttps://agentprime.io/advisories/CVE-2026-90437/https://agentprime.io/advisories/CVE-2026-90437/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 06:47:30 GMTCVECVE-2026-84434: Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Fieldhttps://agentprime.io/advisories/CVE-2026-84434/https://agentprime.io/advisories/CVE-2026-84434/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Sep 2026 02:27:09 GMTCVEcriticalCVE-2026-16649: Gravity Forms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via Post Body Field Valuehttps://agentprime.io/advisories/CVE-2026-16649/https://agentprime.io/advisories/CVE-2026-16649/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 06:37:56 GMTCVECVE-2026-19513: Gravity Forms <= 3.0.2 - Unauthenticated Arbitrary File Upload via State/Chunk Hash Confusionhttps://agentprime.io/advisories/CVE-2026-19513/https://agentprime.io/advisories/CVE-2026-19513/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 13:29:50 GMTCVECVE-2026-12997: Gravity Forms <= 2.10.4 - Unauthenticated Arbitrary File Read via 'gform_uploaded_files' Parameterhttps://agentprime.io/advisories/CVE-2026-12997/https://agentprime.io/advisories/CVE-2026-12997/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 18:34:13 GMTCVECVE-2026-5110: Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Single Product Field Inside Repeaterhttps://agentprime.io/advisories/CVE-2026-5110/https://agentprime.io/advisories/CVE-2026-5110/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 02 May 2026 05:29:30 GMTCVECVE-2026-5111: Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Hidden Product Field in Repeaterhttps://agentprime.io/advisories/CVE-2026-5111/https://agentprime.io/advisories/CVE-2026-5111/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 02 May 2026 05:29:29 GMTCVECVE-2026-5109: Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Product Optionhttps://agentprime.io/advisories/CVE-2026-5109/https://agentprime.io/advisories/CVE-2026-5109/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 02 May 2026 05:29:29 GMTCVECVE-2026-5112: Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Calculation Product Field in Repeaterhttps://agentprime.io/advisories/CVE-2026-5112/https://agentprime.io/advisories/CVE-2026-5112/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 02 May 2026 05:29:28 GMTCVECVE-2026-5113: Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Consent Field Hidden Inputhttps://agentprime.io/advisories/CVE-2026-5113/https://agentprime.io/advisories/CVE-2026-5113/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 02 May 2026 05:29:28 GMTCVECVE-2026-4394: Gravity Forms <= 2.9.30 - Unauthenticated Stored Cross-Site Scripting via Credit Card 'Card Type' Sub-Fieldhttps://agentprime.io/advisories/CVE-2026-4394/https://agentprime.io/advisories/CVE-2026-4394/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 23:25:28 GMTCVECVE-2026-4406: Gravity Forms <= 2.9.30 - Reflected Cross-Site Scripting via 'form_ids' Parameterhttps://agentprime.io/advisories/CVE-2026-4406/https://agentprime.io/advisories/CVE-2026-4406/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 23:25:27 GMTCVECVE-2026-3492: Gravity Forms <= 2.9.28.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Form Titlehttps://agentprime.io/advisories/CVE-2026-3492/https://agentprime.io/advisories/CVE-2026-3492/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 09:25:43 GMTCVECVE-2025-13407: GravityForms < 2.9.23.1 - Unauthenticated Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2025-13407/https://agentprime.io/advisories/CVE-2025-13407/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Dec 2025 06:00:04 GMTCVECVE-2025-12974: Gravity Forms <= 2.9.21.1 - Unauthenticated Arbitrary File Upload via Legacy Chunked Uploadhttps://agentprime.io/advisories/CVE-2025-12974/https://agentprime.io/advisories/CVE-2025-12974/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Nov 2025 03:27:07 GMTCVECVE-2025-12352: Gravity Forms <= 2.9.20 - Unauthenticated Arbitrary File Upload via 'copy_post_image'https://agentprime.io/advisories/CVE-2025-12352/https://agentprime.io/advisories/CVE-2025-12352/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Nov 2025 04:28:53 GMTCVEcriticalCVE-2024-13378: GravityForms 2.9.0.1 - 2.9.1.3 - Unauthenticated Stored Cross-Site Scripting via 'style_settings' parameterhttps://agentprime.io/advisories/CVE-2024-13378/https://agentprime.io/advisories/CVE-2024-13378/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jan 2025 09:36:39 GMTCVECVE-2024-13377: GravityForms <= 2.9.1.3 - Unauthenticated Stored Cross-Site Scripting via 'alt' parameterhttps://agentprime.io/advisories/CVE-2024-13377/https://agentprime.io/advisories/CVE-2024-13377/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jan 2025 09:36:38 GMTCVE