GHL Gravity Bridge – Send Gravity Forms leads to GHL CRM Security & Risk Analysis

wordpress.org/plugins/go-high-level-extension-for-gravity-form

This Gravity Forms extension seamlessly syncs with GoHighLevel CRM for streamlined lead management and enhanced follow-up.

600 active installs v6.0.2 PHP 7.4+ WP 4.0+ Updated Mar 9, 2026
addonsautomationgravityformhighlevellead-connector
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is GHL Gravity Bridge – Send Gravity Forms leads to GHL CRM Safe to Use in 2026?

Generally Safe

Score 100/100

GHL Gravity Bridge – Send Gravity Forms leads to GHL CRM has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 25d ago
Risk Assessment

The plugin "go-high-level-extension-for-gravity-form" version 6.0.2 exhibits a concerning security posture primarily due to a lack of authentication checks on its sole AJAX handler. This creates a significant attack vector where any unauthenticated user could potentially trigger this handler, leading to unintended consequences. While the plugin shows some positive signs like a high percentage of prepared statements for SQL queries and no known historical vulnerabilities, these strengths are overshadowed by the identified critical taint flows and the general absence of security checks like nonces and capability checks.

Key Concerns

  • AJAX handler without auth checks
  • Critical taint flow detected
  • No nonce checks
  • No capability checks
  • Low percentage of properly escaped output
Vulnerabilities
None known

GHL Gravity Bridge – Send Gravity Forms leads to GHL CRM Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

GHL Gravity Bridge – Send Gravity Forms leads to GHL CRM Code Analysis

Dangerous Functions
0
Raw SQL Queries
10
61 prepared
Unescaped Output
27
52 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
5
Bundled Libraries
0

SQL Query Safety

86% prepared71 total queries

Output Escaping

66% escaped79 total outputs
Data Flows
5 unsanitized

Data Flow Analysis

5 flows5 with unsanitized paths
ghl_check_form_data (admin\class-ghl-gf-extension-admin.php:296)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
1 unprotected

GHL Gravity Bridge – Send Gravity Forms leads to GHL CRM Attack Surface

Entry Points1
Unprotected1

AJAX Handlers 1

authwp_ajax_ghl_check_form_dataincludes\class-ghl-gf-extension.php:174
WordPress Hooks 16
actionadmin_noticesghl-gf-extension.php:62
actionadmin_initghl-gf-extension.php:71
actioninitghl_api\ghl-get-token.php:3
actionplugins_loadedincludes\class-ghl-gf-extension.php:146
actionadmin_enqueue_scriptsincludes\class-ghl-gf-extension.php:164
actionadmin_enqueue_scriptsincludes\class-ghl-gf-extension.php:165
filtergform_form_settings_menuincludes\class-ghl-gf-extension.php:166
filtergform_form_settings_page_my_custom_form_settings_pageincludes\class-ghl-gf-extension.php:167
actionadmin_menuincludes\class-ghl-gf-extension.php:169
actiongform_after_submissionincludes\class-ghl-gf-extension.php:172
filterplugin_action_linksincludes\class-ghl-gf-extension.php:173
actionadmin_menuincludes\class-ghl-gf-extension.php:175
filteradmin_footer_textincludes\class-ghl-gf-extension.php:176
actionin_plugin_update_message-go-high-level-extension-for-gravity-form/ghl-gf-extension.phpincludes\class-ghl-gf-extension.php:177
actionwp_enqueue_scriptsincludes\class-ghl-gf-extension.php:192
actionwp_enqueue_scriptsincludes\class-ghl-gf-extension.php:193
Maintenance & Trust

GHL Gravity Bridge – Send Gravity Forms leads to GHL CRM Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 9, 2026
PHP min version7.4
Downloads15K

Community Trust

Rating68/100
Number of ratings5
Active installs600
Developer Profile

GHL Gravity Bridge – Send Gravity Forms leads to GHL CRM Developer Profile

ibsofts

5 plugins · 1K total installs

100
trust score
Avg Security Score
100/100
Avg Patch Time
1 days
View full developer profile
Detection Fingerprints

How We Detect GHL Gravity Bridge – Send Gravity Forms leads to GHL CRM

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/go-high-level-extension-for-gravity-form/admin/css/ghl-gf-extension-admin.css
Script Paths
/wp-content/plugins/go-high-level-extension-for-gravity-form/admin/js/ghl-gf-extension-admin.js
Version Parameters
go-high-level-extension-for-gravity-form/admin/css/ghl-gf-extension-admin.css?ver=go-high-level-extension-for-gravity-form/admin/js/ghl-gf-extension-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
ibs_ghlgf_error
JS Globals
ghl_form_data
FAQ

Frequently Asked Questions about GHL Gravity Bridge – Send Gravity Forms leads to GHL CRM