SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-32466

HIGH · CVSS 8.5 EPSS 0.28%

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Gravity Forms Bookings premium versions up to 2.1 are vulnerable to a SQL injection flaw that could allow attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or manipulation. Organizations using this plugin should prioritize patching this vulnerability to mitigate the risk of data breaches and maintain the integrity of their systems.

CVE
CVE-2026-32466
Severity
HIGH
CVSS
8.5
EPSS
0.28%

Original NVD Description

Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.