CVE-2025-8593

Name of the Vulnerable Software and Affected Versions GSheetConnector For Gravity Forms plugin for WordPress versions prior to 1.3.28

Description The GSheetConnector For Gravity Forms plugin for WordPress is susceptible to an authorization bypass. This occurs because of a missing capability check on the install plugin function. Attackers with subscriber-level access or higher can install plugins on the target site, potentially leading to arbitrary code execution on the server.

Recommendations Update the GSheetConnector For Gravity Forms plugin to version 1.3.28 or later.