GravityMore Gravity Bookings

• CVE-2026-2508 Medium 6.5 Gravity Forms Booking <= 2.7.1 - Authenticated (Subscriber+) Time-Based SQL Injection via 'staff_id' 0.4%
• CVE-2026-1719 High 7.5 Gravity Bookings <= 2.5.9 - Unauthenticated SQL Injection via 'category_id' Parameter 0.3%