WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ninja-forms
Published
2016-08-16
Title
Ninja Forms <= 2.9.55.1 - Authenticated SQL Injection
Slug
ninja-forms
Published
2018-02-20
Title
Ninja Forms <= 3.2.13 - Cross-Site Scripting (XSS)
Slug
ninja-forms
Published
2018-08-21
Title
Ninja Forms <= 3.3.13 - CSV Injection
Slug
ninja-forms
Published
2018-08-27
Title
Ninja Forms <= 3.3.13 - Cross-Site Scripting (XSS) in Import Function
Slug
ninja-forms
Published
2018-11-14
Title
Ninja Forms <= 3.3.17 - Unauthenticated Cross-Site Scripting (XSS)
Slug
ninja-forms
Published
2018-12-01
Title
Ninja Forms <= 3.3.19 - Authenticated Open Redirect
Slug
ninja-forms
Published
2019-01-10
Title
Ninja Forms < 3.3.21.3 - XSS and SQLi
Slug
ninja-forms
Published
2019-01-07
Title
Ninja Forms < 3.3.21.2 - SQL Injection
Slug
ninja-forms
Published
2018-07-06
Title
Ninja Forms < 3.3.9 - Insufficient Restrictions during Export Personal Data requests
Slug
ninja-forms
Published
2018-02-26
Title
Ninja Forms < 3.2.15 - Parameter Tampering
Slug
ninja-forms
Published
2017-03-07
Title
Ninja Forms < 3.0.31 - XSS
Slug
ninja-forms
Published
2020-02-03
Title
Ninja Forms < 3.4.23 - CSRF to Stored Cross-Site Scripting (XSS)
Slug
ninja-forms
Published
2020-04-29
Title
Ninja Forms < 3.4.24.2 - CSRF to Stored XSS
Slug
ninja-forms
Published
2020-09-22
Title
Ninja Forms < 3.4.27.1 - CSRF leading to Arbitrary Plugin Installation
Slug
ninja-forms
Published
2020-09-22
Title
Ninja Forms < 3.4.27.1 - Validation Bypass via Email Field
Slug
ninja-forms
Published
2020-09-20
Title
Ninja Forms < 3.4.28 - Stored Cross-Site Scripting
Slug
ninja-forms
Published
2021-02-16
Title
Ninja Forms < 3.4.34 - Administrator Open Redirect
Slug
ninja-forms
Published
2021-02-16
Title
Ninja Forms < 3.4.34 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure
Slug
ninja-forms
Published
2021-02-16
Title
Ninja Forms < 3.4.34.1 - Authenticated OAuth Connection Key Disclosure
Slug
ninja-forms
Published
2021-02-16
Title
Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection
Slug
ninja-forms
Published
2021-09-22
Title
Ninja Forms < 3.5.8 - Unprotected REST-API to Sensitive Information Disclosure
Slug
ninja-forms
Published
2021-09-22
Title
Ninja Forms < 3.5.8 - Unprotected REST-API to Email Injection
Slug
ninja-forms
Published
2021-09-27
Title
NinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site Scripting
Slug
ninja-forms
Published
2021-10-26
Title
Ninja Forms < 3.6.4 - Admin+ SQL Injection
Slug
ninja-forms
Published
2022-03-22
Title
Ninja Forms < 3.6.8-wp - Unauthenticated Email Address Disclosure