WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ninja-forms
Published
2024-07-04
Title
Ninja Forms < 3.8.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
ninja-forms
Published
2024-07-24
Title
Ninja Forms < 3.8.7 - Cross-Site Request Forgery
Slug
ninja-forms
Published
2024-08-12
Title
Ninja Forms 3.8.6-3.8.10 - Reflected XSS
Slug
ninja-forms
Published
2024-08-28
Title
Ninja Forms < 3.8.12 - Administrator+ Stored Cross-Site Scripting
Slug
ninja-forms
Published
2024-09-24
Title
Ninja Forms Contact Form < 3.8.16 - Reflected Self-Based Cross-Site Scripting via Referer
Slug
ninja-forms
Published
2024-10-28
Title
Ninja Forms < 3.8.18 - Admin+ Stored XSS
Slug
ninja-forms
Published
2024-10-28
Title
Ninja Forms < 3.8.18 - Admin+ Stored XSS
Slug
ninja-forms
Published
2024-12-11
Title
Ninja Forms < 3.8.20 - Unauthenticated Stored XSS via Form Calculations
Slug
ninja-forms
Published
2024-12-28
Title
Ninja Forms < 3.8.23 - Subscriber+ Arbitrary Shortcode Execution
Slug
ninja-forms
Published
2025-01-29
Title
Ninja Forms < 3.8.25 - Contributor+ Stored XSS
Slug
ninja-forms
Published
2025-04-28
Title
Ninja Forms < 3.10.1 - Admin+ Stored XSS
Slug
ninja-forms
Published
2025-04-28
Title
Ninja Forms < 3.10.1 - Admin+ Stored XSS
Slug
ninja-forms
Published
2025-04-28
Title
Ninja Forms < 3.10.1 - Admin+ Stored XSS
Slug
ninja-forms
Published
2025-06-26
Title
Ninja Forms < 3.10.2.2 - Contributor+ Stored XSS via CSTI
Slug
ninja-forms
Published
2025-08-28
Title
Ninja-forms < 3.11.1 - Unauthenticated PHP Object Injection
Slug
ninja-forms
Published
2025-09-26
Title
Ninja Forms < 3.12.1 - Statistics Collection Opt In via CSRF
Slug
ninja-forms
Published
2025-09-26
Title
Ninja Forms < 3.12.1 - Limited File Deletion via CSRF
Slug
ninja-forms
Published
2025-12-12
Title
Ninja Forms < 3.13.3 - Unauthenticated Token Generation and Submission Disclosure
Slug
ninja-forms
Published
2026-02-09
Title
Ninja Forms < 3.14.1 - Unauthenticated Information Disclosure
Slug
ninja-forms
Published
2026-03-27
Title
Ninja Forms < 3.14.2 - Contributor+ Sensitive Information Disclosure via Block Editor Token
Slug
ninja-forms-uploads
Published
2019-04-11
Title
Ninja Forms File Uploads Extension <= 3.0.22 - Unauthenticated Arbitrary File Upload
Slug
ninja-forms-uploads
Published
2022-03-08
Title
Ninja Forms File Uploads Extension < 3.3.13 - Unauthenticated Stored Cross-Site Scripting
Slug
ninja-forms-uploads
Published
2022-03-08
Title
Ninja Forms File Uploads Extension < 3.3.1 - Unauthenticated Arbitrary File Upload
Slug
ninja-forms-uploads
Published
2024-09-06
Title
Ninja Forms File Uploads < 3.3.18 - Unauthenticated Stored Cross-Site Scripting via File Upload
Slug
ninja-forms-uploads
Published
2026-04-06
Title
Ninja Forms - File Upload < 3.3.27 - Unauthenticated Arbitrary File Upload