Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2014-6446

The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code via a request to utilities/code_generator.php.

CVSS 2.0 · 7.5 High EPSS 46.2% KEV · Not listed
Vendors
Infusionsoft Gravity Forms Project
Products
Infusionsoft Gravity Forms