GF Windcave Free

GF Windcave Free has one disclosed vulnerability in the WordSec catalog, all reported in 2015; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for GF Windcave Free has a vendor fix available, so running the current release closes it.

GF Windcave Free is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all GF Windcave Free vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2015-10117

GF Windcave Free <= 1.4.3 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
GF Windcave Free banner
Latestv2.6.1

GF Windcave Free

webaware

Author

webaware

5.0(5)
100/100
Last Updated
2026-09-06 (8d ago)
Active Installs
100+
Downloads
11,185
Requires WP
4.9+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2013-01-25 (14y ago)

Easily create online payment forms with Gravity Forms and Windcave (DPS Payment Express) PxPay GF Windcave Free integrates the Windcave hosted payment page (PxPay 2.0) with Gravity Forms advanced form builder. build online donation forms build online booking forms build simple Buy Now forms NB: this plugin extends Gravity Forms; you still need to install and activate Gravity Forms! Sponsorships creation of this plugin was generously sponsored by IstanbulMMV Thanks for sponsoring new features on GF Windcave Free! Requirements Install the Gravity Forms plugin Create an account with Windcave for the hosted payment page (PxPay 2.0) Privacy Information gathered for processing a credit card transaction is transmitted to Windcave for processing, and in turn, Windcave passes that information on to your bank. Please review Windcave’s Privacy Policy for information about how that affects your website’s privacy policy. By using this plugin, you are agreeing to the terms of use for Windcave.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C