- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/19/2026, grav-plugin-form recorded 3 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of grav-plugin-form and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-86194Grav Form Plugin before 9.1.22 Cross-Page Form ExecutionCVE-2026-85602Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication BypassCVE-2026-69087Grav Form Plugin before 9.1.13 Open Redirect via form.value() TwigCVE-2026-42845Grav: Anonymous Page Content Overwrite via Form File Upload filename OverrideCVE-2026-42842grav-plugin-form: XSS via Taxonomy Field Values in Admin Panel| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-86194Grav Form Plugin before 9.1.22 Cross-Page Form Execution | Exploitation statusNot exploited | FixYes | Published09/05/2026 | SeverityMedium |
CVE-2026-85602Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypass | Exploitation statusActively exploited | FixYes | Published09/04/2026 | SeverityCritical |
CVE-2026-69087Grav Form Plugin before 9.1.13 Open Redirect via form.value() Twig | Exploitation statusActively exploited | FixYes | Published08/03/2026 | SeverityHigh |
CVE-2026-42845Grav: Anonymous Page Content Overwrite via Form File Upload filename Override | Exploitation statusActively exploited | FixYes | Published05/11/2026 | SeverityHigh |
CVE-2026-42842grav-plugin-form: XSS via Taxonomy Field Values in Admin Panel | Exploitation statusActively exploited | FixYes | Published05/11/2026 | SeverityMedium |
5 Results | Page 1 of 1