Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
GravityKit records in CISA KEVNo GravityKit vulnerabilities are listed in CISA KEV.
Priority LOW 39
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms <= 2.7.2 versions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00278 · Published 2026-09-30 · No fix listed CWE-862
Priority LOW 30
Unauthenticated Insecure Direct Object References (IDOR) in GravityView <= 3.0.0 versions.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00313 · Published 2026-06-26 · No fix listed CWE-639
Open these records in search →