8.3Yüksek

CVE-2023-28782WordPress Gravity Forms Plugin <= 2.7.3 is vulnerable to PHP Object Injection

Rocketgenius Inc. Gravity Forms Yayım: 2023-12-20 17:46 (2 yıl önce)

Açıklama

Deserialization of Untrusted Data vulnerability in Rocketgenius Inc. Gravity Forms.This issue affects Gravity Forms: from n/a through 2.7.3.

Zayıflık türü (CWE): CWE-502

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
Rocketgenius Inc.	Gravity Forms	≤ 2.7.3

Kaynaklar ve yamalar

https://patchstack.com/database/vulnerability/gravityforms/wordpress-gravity-forms-plugin-2-7-3-unauthenticat… vdb-entry

CVSS puanı

8.3Yüksek

Kaynak: Patchstack · CVSS 3.1

Saldırı yolu: Ağ
Karmaşıklık: Düşük
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekmez
Kapsam: Değişir
Gizlilik: Düşük
Bütünlük: Düşük
Erişilebilirlik: Düşük

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

EPSS (30 günde istismar olasılığı)

0.62%

tüm CVE'lerin %50'inden yüksek

Zaman çizelgesi

Numara ayrıldı2023-03-23
Yayımlandı2023-12-20 17:46
IP-DB'ye ulaştı2026-10-24 23:53
Son güncelleme2026-04-28 19:08

Numarayı veren (CNA): Patchstack

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — WordPress plugins & themes

5.3Orta

CVE-2026-125767 11 dakika önce

WordPress Hubbub Lite plugin <= 1.36.3.1 - Sensitive Data Exposure vulnerability

NerdPress Hubbub Lite

Insertion of Sensitive Information Into Sent Data vulnerability in NerdPress Hubbub Lite social-pug allows Retrieve Embedded Sensitive Data.This issue affects Hubbub Lite: from n/a through 1.36.3.1.

5.3Orta

CVE-2026-125766 22 dakika önce

WordPress WPZOOM Social Feed Widget & Block plugin <= 2.4.1 - Sensitive Data Exposure vulnerability

WPZOOM WPZOOM Social Feed Widget & Block

Insertion of Sensitive Information Into Sent Data vulnerability in WPZOOM WPZOOM Social Feed Widget & Block instagram-widget-by-wpzoom allows Retrieve Embedded Sensitive Data.This issue affects WPZOOM Social Feed Widget & Block: from n/a through 2.4.1.

6.5Orta

CVE-2026-123480 23 dakika önce

WordPress Display Eventbrite Events plugin <= 6.9.1 - Cross Site Scripting (XSS) vulnerability

Fullworks Plugins Display Eventbrite Events

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fullworks Plugins Display Eventbrite Events widget-for-eventbrite-api allows Stored XSS.This issue affects Display Eventbrite Events: from n/a through 6.9.1.

5.3Orta

CVE-2026-125448 23 dakika önce

WordPress Kali Forms plugin <= 2.4.31 - Broken Access Control vulnerability

Kaliforms Kali Forms

Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.31.

4.3Orta

CVE-2026-123481 24 dakika önce

WordPress The Ultimate WordPress Toolkit – WP Extended plugin <= 3.4.2 - Broken Access Control vulnerability

WP Extended The Ultimate WordPress Toolkit – WP Extended

Missing Authorization vulnerability in WP Extended The Ultimate WordPress Toolkit – WP Extended wpextended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Ultimate WordPress Toolkit – WP Extended: from n/a throug…

5.3Orta

CVE-2026-125763 24 dakika önce

WordPress SureForms plugin <= 2.13.0 - Broken Access Control vulnerability

Brainstorm Force SureForms

Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureForms: from n/a through 2.13.0.