WordPress security by component
Gravity Bookings
Plugin description
Gravity Bookings adds appointment and reservation scheduling functionality to Gravity Forms.
Gravity Bookings (gravity-bookings-premium) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published May 06, 2026; the highest published CVSS base score is 7.5.
Plugin slug:
gravity-bookings-premiumLatest vulnerability
CVE-2026-1719: Gravity Bookings: SQL injection
Gravity Bookings is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 2.5.9.
| Safe version |
|
||
|---|---|---|---|
| May 06, 2026 |
CVE-2026-1719
Gravity Bookings: SQL injection
Gravity Bookings is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 2.5.9.
|
See mitigation notes |
CVE7.5
NVDPending
|