41,554 blogs · 4,969,865 posts Claim your blog

Record · corpus.blog/posts/01a08784-d608-70f4-81bb-a342745b3b15

CVE-2025-12352: Arbitrary File Upload in Gravity Forms

hurayraiit.com · published 6 December 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hurayraiit.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 8
Words captured: 1,926

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.gravityforms.com/

gravityforms.com

https://www.cve.org/CVERecord?id=CVE-2025-12352

cve.org

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/gravityforms/gravity-forms-2920-unauthenticated-arbitrary-file-upload-via-copy-post-image

wordfence.com

https://nvd.nist.gov/vuln/detail/CVE-2025-12352

nvd.nist.gov

https://github.com/advisories/GHSA-8ff8-c7j7-c996

github.com

https://patchstack.com/database/wordpress/plugin/gravityforms/vulnerability/wordpress-gravity-forms-plugin-2-9-20-unauthenticated-arbitrary-file-upload-via-copy-post-image-vulnerability

patchstack.com

https://github.com/pronamic/gravityforms/blob/06de1b7e169e4f073e9d0d491e17b89365b48c20/forms_model.php

github.com

https://github.com/pronamic/gravityforms/blob/06de1b7e169e4f073e9d0d491e17b89365b48c20/includes/fields/class-gf-field-fileupload.php

github.com