CVE-2026-103039 - Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom Field
CVE ID :CVE-2026-103039 Published : Oct. 30, 2026, 7:16 a.m. | 44 minutes ago Description :The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom Field whose input type is List. This is due to...