CVE-2025-13407 | Rocketgenius Gravity Forms Plugin up to 2.9.23.0 on WordPress unrestricted upload

Uncategorized

A vulnerability, which was classified as critical, has been found in Rocketgenius Gravity Forms Plugin up to 2.9.23.0 on WordPress. This issue affects some unknown processing. This manipulation causes unrestricted upload.

This vulnerability is handled as CVE-2025-13407. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More