File and Path Handling

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. WordPress Gravity Forms Plugin <=3.1.0.4 - Unauthenticated Arbitrary File UploadCVE-2026-84434Gravity Forms · CVSS 9.8 · 3.9% likely

   CWE-434

2. Gravity Forms <= 2.9.20 - Unauthenticated Arbitrary File Upload via 'copy_post_image'CVE-2025-12352Gravity Forms · CVSS 9.8 · 1.1% likely

   CWE-434

3. Gravity Forms <= 2.10.4 - Unauthenticated Arbitrary File Read via 'gform_uploaded_files' ParameterCVE-2026-12997Gravity Forms · CVSS 7.5 · 0.9% likely

   CWE-22

4. Gravity Forms <= 2.9.21.1 - Unauthenticated Arbitrary File Upload via Legacy Chunked UploadCVE-2025-12974Gravity Forms · CVSS 8.1 · 0.7% likely

   CWE-434

5. Gravity Forms <= 3.0.2 - Unauthenticated Arbitrary File Upload via State/Chunk Hash ConfusionCVE-2026-19513Gravity Forms · CVSS 8.1 · 0.7% likely

   CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.