Gravity Forms v1.9.6 is now available via automatic update and the customer downloads page. This is a security and maintenance release.
The security issue we have patched is minor and not something that can be exploited without the user having admin access to your WordPress Dashboard. However, this may not be the case with the many other plugins that may be impacted.
This release was coordinated with numerous other plugin developers and the WordPress core team due to the fact a large number of WordPress plugins are impacted. Some of the other plugins include: Easy Digital Downloads, WP e-Commerce, All In One SEO, WP SEO and Automattic's Jetpack.
We highly recommend that you make sure that Gravity Forms is up to date on your WordPress site, and more importantly that all of of your WordPress plugins are also updated. Yoast has a great blog post that outlines the issue and how developers can avoid it going forward.