Skip to content
Threat Feed
Subscribe

Product

Gravity Forms (<= 3.0.2)

1 brief RSS
high advisory

Arbitrary File Upload Vulnerability in Gravity Forms

An arbitrary file upload vulnerability in the Gravity Forms WordPress plugin (<= 3.0.2) allows unauthenticated attackers to write arbitrary files to the temporary upload directory, potentially leading to remote code execution or stored XSS.

Gravity Forms wordpress vulnerability rce xss
1r 2t 1c