VulnSocial

CVE-2026-12997Disclosure

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Gravity Forms plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.10.4 via the 'gform_uploaded_files' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Exploitation requires the targeted form to not enforce login (so publicly accessible), which allows the unauthenticated attacker to reach the process_send_resume_link endpoint and supply an arbitrary recipient email address to receive the traversal-retrieved file as a notification attachment.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-21: 1Technical Details · 2026-07-21: 107-21
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Mohammad Ebrahim Aali@moh_e_a
    Disclosure

    🚨 گزارش آسیب‌پذیری جدید در افزونه #وردپرس Gravity Forms نسخه‌های قبل از 2.10.5 در معرض Directory Traversal بدون نیاز به احراز هویت (CVE-2026-12997) هستند. این نقص در شرایط خاص می‌تواند باعث افشای فایل‌های حساس مانند wp-config.php شود! اطلاعات تکمیلی: https://www.sentinelone.com/vulnerability-database/cve-2026-12997/#cq=i1 https://t.co/0Gkievs9z0

    Post summary

    The tweet announces an unauthenticated Directory Traversal flaw (CVE-2026-12997) in Gravity Forms versions prior to 2.10.5 that could expose sensitive files such as wp‑config.php.

    00091457
    1.2K followersView on X

Explore more

Back to dashboard