High · 8.5 CVE-2026-32466 EUVD-2026-60902GHSA-9hp2-vwfq-gqq5

WordPress Gravity Forms Bookings premium plugin <= 2.1 - SQL Injection vulnerability

Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack

Vendor: WP Experts Product: Gravity Forms Bookings premium

Description

Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.

Affected products

Vendor	Product	Affected	Fixed
WPExperts	Gravity Forms Bookings premium	≤ 2.1	—

References

https://patchstack.com/database/wordpress/plugin/gf-bookings-premium/vulnerability/wordpress-gravity-forms-bookings-premium-plugin-2-1-sql-injection-vulnerability?_s_id=cve vdb-entry