Patchstack published an advisory on a supply chain attack affecting Gravity Forms that enables remote code execution on affected websites.