← WordPress Vulnerabilities
WordPress security by component

Gravity Bookings

Gravity Bookings is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 06, 2026; the highest CVE/CNA score is 7.5.

Plugin slug: gravity-bookings-premium

CVE-2026-1719: Gravity Bookings: SQL injection

Gravity Bookings is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 2.5.9.

PublishedMay 06, 2026
Known safe version> 2.5.9
Safe version
May 06, 2026 CVE-2026-1719
Gravity Bookings: SQL injection
Gravity Bookings is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 2.5.9.
> 2.5.9
CVE7.5
NVDPending