CVE-2026-97296
CVE-2026-97296 · WordPress Gravity Forms plugin < 3.1.1 - PHP Object Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1.
CVSS 8.1 · High · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
gravity forms
- Versions
- ≥ 0, < 3.1.1: Affected; ≥ 3.1.1: Not affected (custom)
Update to 3.1.1