iContact for Gravity Forms

iContact for Gravity Forms has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for iContact for Gravity Forms has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Skalucy. iContact for Gravity Forms is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.2.39.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all iContact for Gravity Forms vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-68863

iContact for Gravity Forms <= 1.3.2 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2026-02-05 00:00	iContact for Gravity Forms <= 1.3.2 - Reflected Cross-Site Scripting iContact for Gravity Forms <= 1.3.2	`CVE-2025-68863`	6.1 Medium	Skalucy	No

Showing 1–1 of 1 reports

Latestv1.3.2

iContact for Gravity Forms

Author

Zack Katz

5.0(1)

100/100

Last Updated

2015-06-09 (11y ago)

Active Installs

70+

Downloads

9,459

Requires WP

3.3+

Requires PHP

Tested up to

WP 4.2.39

Created

2011-10-24 (15y ago)

The best way to integrate with iContact Integrate your Gravity Forms forms so that when users submit a form entry, the entries get added to iContact. Link any field type with iContact, including custom fields. Learn about email marketing with iContact: MessageBuilder™ Create beautiful messages in minutes with iContact’s drag-and-drop message creation tool. Simply pick a template from iContact’s well-stocked template library, and make it your own by adding your brand colors, images, links, and text. MessageCoder™ If you are a design or HTML pro, this is the tool for you. Use MessageCoder to import HTML from your favorite template or to start a message from scratch. Then use iContact’s table editing tools, message previews, and custom color swatches to put the final touches on a message that’s exactly what you want. Email Templates Choose from hundreds of thoughtfully designed templates guaranteed to make your messages pop. Email Delivery iContact moves your messages straight from your business to your customers’ inboxes, every time. How do they do it? With a team of delivery specialists, SpamCheck™, and close relationships with all the major Internet service providers.

View on WordPress.org