GHSA-m983-q76g-cwpq
Gravity Forms plugin leak hashed passwords
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | wp-premium/gravityforms | < 2.4.9 | 2.4.9 |
Details
As written in the advisory (Markdown source, shown as plain text).
common.php in the Gravity Forms plugin before 2.4.9 for WordPress can leak hashed passwords because user_pass is not considered a special case for a `$current_user->get($property)` call.
References
External links from the advisory. They lead to third-party sites.