What’s Vulnerable › Products
GravityMore Gravity Bookings vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your GravityMore Gravity Bookings version is affected
Latest GravityMore Gravity Bookings vulnerabilities
- CVE-2026-2508 — Gravity Forms Booking <= 2.7.1 - Authenticated (Subscriber+) Time-Based SQL Injection via 'staff_id' (CVSS 6.5)
- CVE-2026-1719 — Gravity Bookings <= 2.5.9 - Unauthenticated SQL Injection via 'category_id' Parameter (CVSS 7.5)