CVE
CVE-2026-4394 — Gravity Forms < 2.9.31 - Unauthenticated Stored Cross-Site Scripting via Credit Card 'Card Type' Sub-Field
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-4394 | Gravity Forms < 2.9.31 - Unauthenticated Stored Cross-Site Scripting via Credit Card 'Card Type' Sub-Field | — | Unknown | < 2.9.31 | 2.9.31 | — | — |
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.