CVE-2026-74004

MediumCVSS 5.4

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile - higher than 13% of all known CVEs

Summary

The Gravity Booster – Styles & Layouts for Gravity Forms plugin version 6.0 and earlier has a broken access control vulnerability exploitable by Subscriber users. This means a subscriber can gain unauthorized access to functions they should not have permissions for.

Risk Assessment

The risk is that a low-privileged user can perform administrative operations, potentially leading to data integrity issues or unauthorized configuration changes.

Recommendation

It is recommended to update the plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Subscriber Broken Access Control in Gravity Booster – Styles & Layouts for Gravity Forms <= 6.0 versions.