← WordPress Vulnerabilities
WordPress security by component

WP Gravity Forms Salesforce

WP Gravity Forms Salesforce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 18, 2025; the highest CVE/CNA score is 9.8.

Plugin slug: wp-gravity-forms-salesforce

CVE-2025-60180: WP Gravity Forms Salesforce: Code execution

WP Gravity Forms Salesforce is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedDec 18, 2025
Safe version guidanceSee mitigation notes
Safe version
Dec 18, 2025 CVE-2025-60180
WP Gravity Forms Salesforce: Code execution
WP Gravity Forms Salesforce is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE9.8
NVDPending