← All advisories

High severity8.3NVD Advisory· Published Dec 20, 2023· Updated Apr 28, 2026

CVE-2023-28782

CVE-2023-28782

Description

Deserialization of Untrusted Data vulnerability in Rocketgenius Inc. Gravity Forms.This issue affects Gravity Forms: from n/a through 2.7.3.

Affected products

2

Gravityforms/Gravity Forms
cpe:2.3:a:gravityforms:gravity_forms:*:*:*:*:*:wordpress:*:*
Range: <2.7.4
WordPress/Gravity Formsllm-fuzzy
Range: <=2.7.3

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/gravityforms/wordpress-gravity-forms-plugin-2-7-3-unauthenticated-php-object-injection-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.