CVE-2026-103039 | Gravity Forms Plugin up to 3.1.2 on WordPress Post Custom Field create_post deserialization

October 30, 2026 Yanac

A vulnerability classified as critical has been found in Gravity Forms Plugin up to 3.1.2 on WordPress. This vulnerability affects the function GFFormsModel::create_post of the component Post Custom Field. This manipulation causes deserialization.

The identification of this vulnerability is CVE-2026-103039. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More