GF Windcave Free
GF Windcave Free has one disclosed vulnerability in the WordSec catalog, all reported in 2015; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for GF Windcave Free has a vendor fix available, so running the current release closes it.
GF Windcave Free is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2015-10117GF Windcave Free <= 1.4.3 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

GF Windcave Free
Author
webaware
Easily create online payment forms with Gravity Forms and Windcave (DPS Payment Express) PxPay GF Windcave Free integrates the Windcave hosted payment page (PxPay 2.0) with Gravity Forms advanced form builder. build online donation forms build online booking forms build simple Buy Now forms NB: this plugin extends Gravity Forms; you still need to install and activate Gravity Forms! Sponsorships creation of this plugin was generously sponsored by IstanbulMMV Thanks for sponsoring new features on GF Windcave Free! Requirements Install the Gravity Forms plugin Create an account with Windcave for the hosted payment page (PxPay 2.0) Privacy Information gathered for processing a credit card transaction is transmitted to Windcave for processing, and in turn, Windcave passes that information on to your bank. Please review Windcave’s Privacy Policy for information about how that affects your website’s privacy policy. By using this plugin, you are agreeing to the terms of use for Windcave.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C