Skip to content
Threat Feed
Subscribe

Product

Gravity Forms (<= 2.10.5)

1 brief RSS
high advisory

Arbitrary File Upload Vulnerability in Gravity Forms

An arbitrary file upload vulnerability in the Gravity Forms WordPress plugin (<= 3.0.2) allows unauthenticated attackers to write arbitrary files to the temporary upload directory, potentially leading to remote code execution or stored XSS.

Gravity Forms +1 wordpress vulnerability rce xss application-security
1r 3t 1c updated