Guys im seeing many many WordPress websites exploited via this exploit - Malware Cleanup to Arbitrary File Upload in Gravity Forms
can we ensure its covered asap? seeing requests like this ?gf_page=upload is a major telltale sign.
In the newer versions of gravity forms they deprecated ?gf_page=upload to fix it