gravity2pdf

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

gravity2pdf records in CISA KEV

No gravity2pdf vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-20854 CVE-2025-28911 · GHSA-897j-g3gr-c45r

WordPress Gravity 2 PDF plugin <= 3.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gravity2pdf Gravity 2 PDF gf2pdf allows Reflected XSS.This issue affects Gravity 2 PDF: from n/a through <= 3.1.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00318 Published 2025-03-26 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0