CVE-2023-28782: Gravityforms Gravity Forms

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in Rocketgenius Inc. Gravity Forms.This issue affects Gravity Forms: from n/a through 2.7.3.

Affected products

• Gravityforms Gravity Forms: before 2.7.4 (fixed in 2.7.4)

Published 2023-12-20. Last modified 2026-06-17.