WordPress security by component
Connector for Gravity Forms and Google Sheets
Plugin description
Connector for Gravity Forms and Google Sheets is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Oct 22, 2025; the highest CVE/CNA score is 9.8.
Plugin slug:
wp-gravity-forms-spreadsheetsLatest vulnerability
CVE-2025-60209: Connector for Gravity Forms and Google Sheets: Code execution
Connector for Gravity Forms and Google Sheets is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
| Safe version |
|
||
|---|---|---|---|
| Oct 22, 2025 |
CVE-2025-60209
Connector for Gravity Forms and Google Sheets: Code execution
Connector for Gravity Forms and Google Sheets is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Aug 14, 2025 |
CVE-2025-54682
Connector for Gravity Forms and Google Sheets: Cross-site request forgery
Connector for Gravity Forms and Google Sheets is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Aug 14, 2025 |
CVE-2025-54681
Connector for Gravity Forms and Google Sheets: An open redirect
Connector for Gravity Forms and Google Sheets is affected by an open redirect. Exposure depends on how the affected operation is made reachable by the site. A crafted link can redirect visitors from the trusted site to an attacker-controlled destination.
|
See mitigation notes |
CVE4.7
NVDPending
|