Cpe:2.3:a:gravity_forms:gravity_forms:*:*:*:*:*:*:*:*

An arbitrary file upload vulnerability in the Gravity Forms WordPress plugin (<= 3.0.2) allows unauthenticated attackers to write arbitrary files to the temporary upload directory, potentially leading to remote code execution or stored XSS.