WordPress Plugin Vulnerabilities

Ninja Forms < 3.3.21.3 - XSS and SQLi

Description

Reflected XSS vulnerability in the administrative dashboard.

Blind SQL injection vulnerability in the search filter on the submissions page.

Affects Plugins

Plugin icon
ninja-forms
Fixed in 3.3.21.3

Miscellaneous

Verified
No
WPVDB ID
730abdcf-e0a0-4d7c-a3b6-ca56c6a59df2

Timeline

Publicly Published
2019-01-10 (about 7 years ago)
Added
2019-06-18 (about 6 years ago)
Last Updated
2019-06-18 (about 6 years ago)

Other

Published
Title
Published
2020-06-21
Title
All in One Support Button < 1.8.8 - Authenticated Stored Cross-Site Scripting
Published
2014-08-01
Title
dmsguestbook 1.7.0 - Multiple Remote Vulnerabilities
Published
2019-11-10
Title
IgniteUp < 3.4.1 - Multiple Issues
Published
2014-08-01
Title
Wordfence 3.3.5 - XSS & IAA
Published
2015-01-11
Title
Our Team Showcase 1.2 - CSRF & XSS