grav-plugin-form vulnerabilities

CVEs whose affected-version data names the grav-plugin-form package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-86194Medium· 6.9

2w ago

Grav Form Plugin before 9.1.22 fails to verify page authorization when resolving forms by name across pages, allowing anonymous visitors to execute form actions defined on login-restricted or unpublished pages

Grav Form Plugin before 9.1.22 fails to verify page authorization when resolving forms by name across pages, allowing anonymous visitors to execute form actions defined on login-restricted or unpublished pages. Attackers can POST to any …

▾ Sunlitgetgrav · grav-plugin-formEPSS 0.32%via NVD