Sign in Subscribe

← All advisories

High severity8.3NVD Advisory· Published Dec 20, 2023· Updated Apr 28, 2026

CVE-2023-28782

CVE-2023-28782

Description

Deserialization of Untrusted Data vulnerability in Rocketgenius Inc. Gravity Forms.This issue affects Gravity Forms: from n/a through 2.7.3.

Affected products

1

Gravityforms/Gravity Forms
cpe:2.3:a:gravityforms:gravity_forms:*:*:*:*:*:wordpress:*:*
Range: <2.7.4

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

patchstack.com/database/vulnerability/gravityforms/wordpress-gravity-forms-plugin-2-7-3-unauthenticated-php-object-injection-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.