Description
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms <= 2.7.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GravityKit | GravityExport Lite for Gravity Forms | ≤ 2.7.2 | — |
High · 7.5
CVE-2026-94120
EUVD-2026-89837GHSA-662q-8gm4-96hg
WordPress GravityExport Lite for Gravity Forms plugin <= 2.7.2 - Broken Access Control vulnerability
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack