CVE-2026-48866 – WordPress Gravity Forms plugin

CVE ID :CVE-2026-48866

Published : June 1, 2026, 3:16 p.m. | 1 hour, 16 minutes ago

Description :Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in Rocketgenius Inc. Gravity Forms allows Path Traversal.

This issue affects Gravity Forms: from n/a through 2.10.0.1.

Severity: 9.6 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…