WordPress security by component
Gravity Bookings
Plugin description
Gravity Bookings is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 25, 2026; the highest CVE/CNA score is 6.5.
Plugin slug:
gravity-forms-bookingLatest vulnerability
CVE-2026-2508: Gravity Bookings: SQL injection
Gravity Bookings is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 2.7.1.
| Safe version |
|
||
|---|---|---|---|
| Jun 25, 2026 |
CVE-2026-2508
Gravity Bookings: SQL injection
Gravity Bookings is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 2.7.1.
|
> 2.7.1 |
CVE6.5
NVDPending
|