Description
Deserialization of Untrusted Data vulnerability in Rocketgenius Inc. Gravity Forms.This issue affects Gravity Forms: from n/a through 2.7.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rocketgenius | Gravity Forms | ≤ 2.7.3 | — |
High · 8.3
CVE-2023-28782
EUVD-2023-32417GHSA-58ff-vg67-843q
WordPress Gravity Forms Plugin <= 2.7.3 is vulnerable to PHP Object Injection
Published Dec 20, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack