infusionsoft gravity forms project vulnerabilities

Products

• infusionsoft gravity forms 1

Latest infusionsoft gravity forms project CVEs

Newest publication first

1. CVE-2014-6446 Infusionsoft Gravity Forms Add-on 1.5.3 - 1.5.10 - Arbitrary File Upload

   Published 2014-09-26

   High·CVSS 7.5 EPSS 46.2% Framework module Public exploit

   The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code via a request to utilities/code_generator.php.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.