GHSA-m983-q76g-cwpqHighCVSS 7.5

Gravity Forms plugin leak hashed passwords

Published
May 24, 2022
Last Modified
April 24, 2024

🔗 CVE IDs covered (1)

CVE-2020-13764 →

📋 Description

common.php in the Gravity Forms plugin before 2.4.9 for WordPress can leak hashed passwords because user_pass is not considered a special case for a $current_user->get($property) call.

🎯 Affected products1

  • composer/wp-premium/gravityforms:< 2.4.9

🔗 References (4)