Extension WordPress

Vulnérabilités GSheetConnector for Gravity Forms – Send Gravity Forms Entries to Google Sheets in Real-Time

Cette page rassemble les failles publiées pour GSheetConnector for Gravity Forms – Send Gravity Forms Entries to Google Sheets in Real-Time, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
0Critiques
3Avec correctif
8,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de GSheetConnector for Gravity Forms – Send Gravity Forms Entries to Google Sheets in Real-Time

3 fiches

CVE-2025-8593 Élevée · 8,8
GSheetConnector for Gravity Forms – Send Gravity Forms Entries to Google Sheets in Real-Time

GSheetConnector For Gravity Forms <= 1.3.27 – Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to authorization bypass in versions less than, or equal to, 1.3.27. This is due to a missing capability check on the 'install_plugin' function. This makes it possible for…

Versions affectées

*-1.3.27

Correctif

1.3.28

Publication

10/10/2025

CVE-2025-8606 Faible · 2,4
GSheetConnector for Gravity Forms – Send Gravity Forms Entries to Google Sheets in Real-Time

GSheetConnector For Gravity Forms <= 1.3.23 – Cross-Site Request Forgery to Arbitrary Plugin Activation/Deactivation

The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 1.3.23. This is due to missing or incorrect nonce validation on the activate_plugin and deactivate_plugin functions. This…

Versions affectées

*-1.3.23

Correctif

1.3.24

Publication

10/10/2025

CVE-2023-2326 Moyenne · 5,4
GSheetConnector for Gravity Forms – Send Gravity Forms Entries to Google Sheets in Real-Time

Gravity Forms Google Sheet Connector <= 1.3.4 – Cross-Site Request Forgery via verify_code_integation_new

The Gravity Forms Google Sheet Connector plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.4. This is due to missing or incorrect nonce validation on the 'verify_code_integation_new' function. This makes it…

Versions affectées

*-1.3.4

Correctif

1.3.5

Publication

05/06/2023

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités