rocketgenius
Security Risk Profile
57
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 2, 2020 to present
8
Total CVEs
4
Critical+High
0
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
57/100
medium
Severity Distribution
Critical
1High
3Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
5
2
Input Validation
2
3
Path Traversal
1
4
SSRF
1
5
Infoleak
1
Most Affected Products
1. composer/wp-premium/gravityforms4
2. Rocketgenius Gravityforms Wordpress4
3. Rocketgenius Gravity Forms3
4. Rocketgenius Gravity Forms Webhooks Wordpress1
5. Gravity Forms WebHooks1
Recent Vulnerabilities
See more →CVE-2026-48866
CVSS 9.6critical
WordPress Gravity Forms plugin <= 2.10.0.1 - Arbitrary File Deletion vulnerability
6/1/2026🔧 No Patch
CVE-2026-5110
CVSS 7.2high
Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Single Product Field Inside Repeater
5/2/2026🔧 No Patch
CVE-2026-5111
CVSS 7.2high
Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Hidden Product Field in Repeater
5/2/2026🔧 No Patch
CVE-2024-13845
CVSS 5.5medium
Gravity Forms WebHooks <= 1.6.0 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
5/1/2025🔧 No Patch
CVE-2020-27851
CVSS 5.4medium
1/20/2021
CVE-2020-27852
CVSS 5.4medium
1/20/2021
CVE-2020-27850
CVSS 4.8medium
1/20/2021
CVE-2020-13764
CVSS 7.5high
6/2/2020
Monitor rocketgenius in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.