CVE-2025-12352

The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the copy_post_image() function in all versions up to, and including, 2.9.20. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. This only impacts sites that have allow_url_fopen set to `On`, the post creation form enabled along with a file upload field for the post

• CWE-434

• https://github.com/pronamic/gravityforms/blob/06de1b7e169e4f073e9d0d491e17b89365b48c20/forms_model.php#L5451C26-L5451C41
• https://github.com/pronamic/gravityforms/blob/06de1b7e169e4f073e9d0d491e17b89365b48c20/includes/fields/class-gf-field-fileupload.php#L306
• https://www.wordfence.com/threat-intel/vulnerabilities/id/42525101-6196-40b9-90e7-c7f1886ef247?source=cve

Published

Nov 7, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-12347A flaw has been found in MaxSite CMS up to 109. This issue a…8.8
• CVE-2025-12348The Icegram Express - Email Subscribers, Newsletters and Mar…5.3
• CVE-2025-12349The Icegram Express - Email Subscribers, Newsletters and Mar…5.3
• CVE-2025-1235A low privileged attacker can set the date of the devices to…4.3
• CVE-2025-12350The DominoKit plugin for WordPress is vulnerable to unauthor…5.3
• CVE-2025-12351Honeywell S35 Series Cameras contains an authorization bypas…6.8
• CVE-2025-12353The WPFunnels – The Easiest Funnel Builder For WordPress And…5.3
• CVE-2025-12354The Live CSS Preview plugin for WordPress is vulnerable to u…4.3
• CVE-2025-12355The Payaza plugin for WordPress is vulnerable to unauthorize…5.3
• CVE-2025-12356The Tickera – Sell Tickets & Manage Events plugin for WordPr…4.3
• CVE-2025-12357By manipulating the Signal Level Attenuation Characterizatio…6.3
• CVE-2025-12358The ShopEngine Elementor WooCommerce Builder Addon plugin fo…4.3