CVE-2026-94120

GravityExport Lite for Gravity Forms versions up to 2.7.2 is susceptible to unauthenticated broken access control, allowing attackers to exploit this vulnerability to gain unauthorized access to sensitive data or functionality. Organizations using this plugin should prioritize patching or mitigating this vulnerability to protect their systems from potential data breaches and unauthorized actions. Immediate action is recommended for those managing web applications that utilize this plugin.