CVE-2025-60080
BaseFortify
Publication date: 2025-12-18
Last updated on: 2026-04-01
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| add-ons.org | pdf_for_gravity_forms | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-502 | The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Deserialization of Untrusted Data issue in the PDF for Gravity Forms + Drag And Drop Template Builder add-on. It allows an attacker to perform Object Injection by exploiting the way the add-on processes serialized data, potentially leading to malicious code execution or other unintended behavior.
How can this vulnerability impact me? :
This vulnerability can allow attackers to inject malicious objects through deserialization, which may lead to unauthorized code execution, data manipulation, or compromise of the affected system running the vulnerable add-on.