Gravityexport Lite For Gravity Forms
Monthly
GravityExport Lite for Gravity Forms versions up to and including 2.7.2 contains a broken access control vulnerability (CWE-862) that allows unauthenticated remote attackers to bypass authorization and access sensitive export data, resulting in high confidentiality impact. The CVSS 3.1 base score is 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating a low-complexity, network-exploitable flaw with no integrity or availability impact. Exploitation requires the plugin to be installed on a site with Gravity Forms, but no authentication or user interaction is needed; no public exploit code is currently identified.
GravityExport Lite for Gravity Forms versions up to and including 2.7.2 contains a broken access control vulnerability (CWE-862) that allows unauthenticated remote attackers to bypass authorization and access sensitive export data, resulting in high confidentiality impact. The CVSS 3.1 base score is 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating a low-complexity, network-exploitable flaw with no integrity or availability impact. Exploitation requires the plugin to be installed on a site with Gravity Forms, but no authentication or user interaction is needed; no public exploit code is currently identified.