CYBERHAWK / CVE / CVE-2026-5110

CVE-2026-5110

Gravity Forms WordPress Plugin

HIGH CVSS 7.2 vibe

The flaw

Unauthenticated stored XSS in SingleProduct fields within Repeater fields.

What to do

Update to version 2.10.1 or later

▸ Scan my repo for CVE-2026-5110

References

First seen 2026-05-08 · Tracked by PickBits CyberHawk · Weekly CVE digest