GravityMore
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Gravity Bookings | 2 | – | Jun 25, 2026 |
Exploited and recent CVEs
- CVE-2026-2508 Gravity Forms Booking <= 2.7.1 - Authenticated (Subscriber+) Time-Based SQL Injection via 'staff_id' 0.4%
- CVE-2026-1719 Gravity Bookings <= 2.5.9 - Unauthenticated SQL Injection via 'category_id' Parameter 0.3%