WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ninja-forms
Published
2021-02-16
Title
Ninja Forms < 3.4.34 - Administrator Open Redirect
Slug
ninja-forms
Published
2021-02-16
Title
Ninja Forms < 3.4.34 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure
Slug
ninja-forms
Published
2021-02-16
Title
Ninja Forms < 3.4.34.1 - Authenticated OAuth Connection Key Disclosure
Slug
ninja-forms
Published
2021-02-16
Title
Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection
Slug
ninja-forms
Published
2021-09-22
Title
Ninja Forms < 3.5.8 - Unprotected REST-API to Sensitive Information Disclosure
Slug
ninja-forms
Published
2021-09-22
Title
Ninja Forms < 3.5.8 - Unprotected REST-API to Email Injection
Slug
ninja-forms
Published
2021-09-27
Title
NinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site Scripting
Slug
ninja-forms
Published
2021-10-26
Title
Ninja Forms < 3.6.4 - Admin+ SQL Injection
Slug
ninja-forms
Published
2022-03-22
Title
Ninja Forms < 3.6.8-wp - Unauthenticated Email Address Disclosure
Slug
ninja-forms
Published
2021-06-07
Title
Nina Forms < 3.5.5 - Reflected Cross-Site Scripting
Slug
ninja-forms
Published
2022-06-10
Title
Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting via Import
Slug
ninja-forms
Published
2022-06-13
Title
Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting
Slug
ninja-forms
Published
2022-06-15
Title
Ninja Forms < 3.6.11 - Unauthenticated PHP Object Injection
Slug
ninja-forms
Published
2022-09-05
Title
NinjaForms < 3.6.13 - Admin+ PHP Objection Injection
Slug
ninja-forms
Published
2023-04-24
Title
Ninja Forms < 3.6.22 - Reflected XSS
Slug
ninja-forms
Published
2023-06-22
Title
Ninja Forms < 3.6.25 - Admin+ Arbitrary File Deletion
Slug
ninja-forms
Published
2023-07-25
Title
Ninja Forms < 3.6.26 - Reflected Cross-Site Scripting
Slug
ninja-forms
Published
2023-07-25
Title
Ninja Forms < 3.6.26 - Subscriber+ Form Entries Export
Slug
ninja-forms
Published
2023-07-25
Title
Ninja Forms < 3.6.26 - Contributor+ Form Entries Export
Slug
ninja-forms
Published
2023-08-07
Title
Ninja Forms < 3.6.26 - Admin+ Stored HTML Injection
Slug
ninja-forms
Published
2023-10-16
Title
Ninja Forms < 3.6.34 - Admin+ Stored XSS
Slug
ninja-forms
Published
2024-02-01
Title
Ninja Forms Contact Form < 3.7.2 - Unauthenticated Second Order SQL Injection
Slug
ninja-forms
Published
2024-03-28
Title
Ninja Forms Contact Form < 3.8.1 - Publicly Accessible Form Submission Export via CSRF
Slug
ninja-forms
Published
2024-03-28
Title
Ninja Forms Contact Form < 3.8.1 - Author+ Stored XSS
Slug
ninja-forms
Published
2024-04-08
Title
Ninja Forms – The Contact Form Builder That Grows With You < 3.8.1 - Admin+ Stored Cross-Site Scripting