CyberRota Analysis
AI-GeneratedGravity Forms Bookings premium versions up to 2.1 are vulnerable to a SQL injection flaw that could allow attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or manipulation. Organizations using this plugin should prioritize patching this vulnerability to mitigate the risk of data breaches and maintain the integrity of their systems.
CVE
CVE-2026-32466
Severity
HIGH
CVSS
8.5
EPSS
0.28%
Original NVD Description
Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.