Privacy, Security and Compliance

Gravity Forms Security Whitepaper

Note: Learn more about Gravity Forms software security in this free white paper which is forked from the original security white paper for WordPress.

Security Warning: merge tags as HTML attribute values

If your form confirmation is using a merge tag as a value for an HTML attribute, you may see the following warning: Your confirmation message appears to contain a merge tag as the value for an HTML attribute.

Security Best Practices

The advice and best practices in this section is to help site owners and administrators understand the issues and learn how to adjust the security features according to their needs.

Information for Security Researchers

If you have discovered a vulnerability in one of our products, we want to hear from you as soon as possible. Please gather as much information together as you can so we can work quickly to address it.

What to do if your site has been compromised

This article helps you determine whether your WordPress site has been compromised, walks you through how to clean it up, explains how to reduce the risk of it happening again, and covers what to gather before contacting our Support Team.

How To Report a Security Issue

We take security issues very seriously and want to ensure that you always feel safe when using Gravity Forms. Here are a few steps you should take if you believe you have a security issue with Gravity Forms.