CVE-2026-74004

The Gravity Booster – Styles & Layouts for Gravity Forms plugin version 6.0 and earlier has a broken access control vulnerability exploitable by Subscriber users. This means a subscriber can gain unauthorized access to functions they should not have permissions for.

The risk is that a low-privileged user can perform administrative operations, potentially leading to data integrity issues or unauthorized configuration changes.

It is recommended to update the plugin to the latest version that includes a fix for this vulnerability.