GravityKit vulnerabilities

Products

• GravityExport Lite for Gravity Forms 1
• GravityView 1

Latest GravityKit CVEs

Newest publication first

1. CVE-2026-94120 WordPress GravityExport Lite for Gravity Forms plugin <= 2.7.2 - Broken Access Control vulnerability

   Published 2026-09-30

   High·CVSS 7.5

   Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms <= 2.7.2 versions.

2. CVE-2026-57665 WordPress GravityView plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability

   Published 2026-06-26

   Medium·CVSS 5.3

   Unauthenticated Insecure Direct Object References (IDOR) in GravityView <= 3.0.0 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.