Gravityforms (Veronalabs) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-02-08. Vendor: Veronalabs.

CVEs of Gravityforms

• CVE-2024-24881 - CVSS 7.1 (high), 2024-02-08: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for…
• CVE-2023-27447 - CVSS 7.5 (high), 2023-12-28: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce,…