All 4 CVE vulnerabilities found in grav-plugin-form, with AI-generated Chinese analysis, references, and POCs.
Vendor: getgrav
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-86194 | Grav Form Plugin before 9.1.22 Cross-Page Form Execution CWE-862 | 6.9 | Medium | 2026-09-05 |
| CVE-2026-85602 | Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypass CWE-807 | 5.3 | Medium | 2026-09-04 |
| CVE-2026-69087 | Grav Form Plugin before 9.1.13 Open Redirect via form.value() Twig CWE-601 | 6.5 | Medium | 2026-08-03 |
| CVE-2026-42845 | Grav: Anonymous Page Content Overwrite via Form File Upload filename Override CWE-73 | - | - | 2026-05-11 |
All 4 known CVE vulnerabilities affecting grav-plugin-form with full Chinese analysis, references, and POCs where available.