WordPress plugin ‘Gravity Forms’ vulnerable to PHP object injection

The vulnerability, which is tracked as CVE-2023-28782, impacts all plugin versions from 2.73 and below. The flaw was discovered by PatchStack on March 27, 2023, and fixed by the vendor with the release of version 2.7.4 on April 11, 2023.