Skip to content
Threat Feed
Subscribe

Product

Gravity Forms Plugin (< 2.10.4)

1 brief RSS
high advisory

Gravity Forms Directory Traversal Vulnerability (CVE-2026-12997)

Unauthenticated attackers can exploit a Directory Traversal vulnerability (CVE-2026-12997) in the Gravity Forms plugin for WordPress, affecting all versions up to and including 2.10.4, to read arbitrary files on the server and receive their contents as an email attachment, potentially exfiltrating sensitive information.

Gravity Forms plugin wordpress plugin web-vulnerability collection network
1r 2t 1c