getgrav grav-plugin-form

2 known vulnerabilities in getgrav grav-plugin-form, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-86194 CVSS 6.9 medium Grav Form Plugin before 9.1.22 fails to verify page authorization when resolving forms by name across pages, allowing anonymous visitors…
CVE-2026-85602 CVSS 9.3 critical The Grav Form plugin (getgrav/grav-plugin-form) versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on…