Virus Scan for Gravity Forms on WordPress

A file upload form powered by Gravity Forms or any other WordPress form plugin introduces the risk of user accidentially or attackers on purpose uploading viruses, trojans, ransomware, and other kinds of malware. Without an antivirus solution, a file upload form may be the entry point for malware into your systems. Therefore, virus scanning of file uploads via forms built with Gravity Forms is essential.

Virus Scan for Gravity Forms on WordPress

attachmentAV for WordPress (>= 1.8.0) supports forms created by the popular Gravity Forms plugin. When a user tries to upload an infected file, attachmentAV will block submitting the form as shown in the following screenshot.

By the way, attachmentAV for WordPress supports WPForms, Formidable Forms, WordPress File Upload and Contact Form 7 as well.

attachmentAV blocks infected files from being uploaded

How does attachmentAV for WordPress work?

  1. A user fills out a form and attaches a file.
  2. A user presses the Submit button.
  3. The attachmentAV plugin sends all attached files to the Virus and Malware Scan API.
  4. The attachmentAV plugin blocks infected files from being uploaded by throwing a data validation error.

Author or visitor submits a new files, attachmentAV scans the file, attachmentAV blocks infected files.

How to get started with virus and malware scanning for Gravity Forms?

Getting up and running takes just a few minutes. In the WordPress admin area, go to Plugins, search for attachmentav, and click Install Now. After activating the plugin, open its settings page and enter your API key. You can get a key by pressing Subscribe to attachmentAV directly from the settings screen and completing the subscription. Once the key is saved, every file uploaded through Gravity Forms (as well as the Media Library) will be scanned automatically.

For the full walkthrough with screenshots of each step, see the attachmentAV for WordPress Setup Guide.

Protect your Gravity Forms uploads today

Gravity Forms makes it easy for developers to build forms allowing users to submit files—but without virus scanning, every upload is a potential threat. attachmentAV for WordPress closes that gap by intercepting files at submission time and rejecting anything malicious before it reaches your systems. Setup takes minutes, runs in the background, and requires no ongoing maintenance.

Give attachmentAV for WordPress a try with a 14-day free trial and keep your site safe from malware.


Published on March 11, 2026 | Written by Andreas

Stay up-to-date

Monthly digest of security updates, new capabilities, and best practices.