Repeater Fields for Gravity Forms
Repeater Fields for Gravity Forms has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Repeater Fields for Gravity Forms has a vendor fix available, so running the current release closes it.
All of these findings were reported by andrea bocchetti. Repeater Fields for Gravity Forms is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-84293Repeater Fields for Gravity Forms <= 3.0.4 - Unauthenticated Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values
Read the full analysisVulnerability Records

Repeater Fields for Gravity Forms
Author
add-ons.org
DEMO: https://demo.add-ons.org/demo-repeater-fields/ Document: https://add-ons.org/document-gravity-forms-repeater-fields/ Download Pro Version: https://add-ons.org/plugin/gravity-forms-repeater-fields/ The Repeater Fields for Gravity Forms allow you to create one or more sets of fields that can be repeated. Have you ever wanted to let your users submit multiple entries of the same field set as a single form on your WordPress site? If so, you’re in luck! This is a plugin to help you do it! Features File Uploads Support Minimum Rows: Sets a limit on how many rows of data are required. Maximum Rows: Sets a limit on how many rows of data are allowed. Button Label: The text shown in the ‘Add Row’ button. Conditional Logic support: The field conditional Logic support Date picker support: The field date/time support Entry and print preview support Payment fields support Drag and drop repeatable fields Pro Version File Upload Support Conditional Logic support Unlimited minimum Unlimited Maximum Payment fields support 30-day money-back guarantee 1-year support
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C