WordPress Plugin Vulnerabilities

Gravity Forms <= 1.8.19 - Arbitrary File Upload

Description

The gravityforms WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
gravityforms
Image Fixed in 1.8.20

References

URL
https://blog.sucuri.net/2015/02/malware-cleanup-to-arbitrary-file-upload-in-gravity-forms.html
URL
https://www.gravityforms.com/gravity-forms-v1-8-20-released/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
c3d81ea3-fdee-4ccb-8f4b-e203bab1f975

Timeline

Publicly Published
2014-12-08 (about 11 years ago)
Added
2015-03-02 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-11-06
Title
Asgaros Forum < 2.7.1 - Unauthenticated Arbitrary File Upload
Published
2025-02-11
Title
Security & Malware scan by CleanTalk < 2.150 - Unauthenticated Arbitrary File Upload
Published
2025-11-06
Title
Gravity Forms 2.9.18 - 2.9.20 - Unauthenticated Arbitrary File Upload via 'copy_post_image'
Published
2021-04-02
Title
Business Hours Pro <= 5.5.0 - Unauthenticated Arbitrary File Upload to RCE
Published
2015-06-10
Title
WordPress 4.1 - 4.1.1 - Arbitrary File Upload