CVE-2026-32466

Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.

Credits

0xVenus | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/gf-bookings-premium/vulnerability/wordpress-gravity-forms-bookings-premium-plugin-2-1-sql-injection-vulnerability?_s_id=cve