Skip to content

Gravitymore Gravity Bookings vulnerabilities

gravitymore gravity bookingsGravity Forms Booking <= 2.7.1 - Authenticated (Subscriber+) Time-Based SQL Injection via 'staff_id'CVE-2026-25086.5 MediumJune 25, 2026
gravitymore gravity bookingsGravity Bookings <= 2.5.9 - Unauthenticated SQL Injection via 'category_id' ParameterCVE-2026-17197.5 HighMay 6, 2026